Information System Security Officer

Department: Col of Engineering and Computing

Classification: Research Staff 12-month

Job Category: Research Staff

Job Type: Full-Time

Work Schedule: Full-time (1.0 FTE, 40 hrs/wk)

Telework Friendly: Hybrid Eligible

Location: Fairfax

Salary: Salary commensurate with education and experience

Restricted: Yes

Criminal Background Check: Yes

Security Clearance Check: Yes

About the Center:

The Rapid Prototyping Research Center (RPRC) focuses on providing its Department of Defense (DoD) sponsors a unique perspective on rapid prototyping that aligns with Section 804 in the FY17 National Defense Authorization Act. Specifically, rather than developing a new system to satisfy intractable problems on the battlefield, the RPRC integrates new technology into existing infrastructure. This unique approach reduces acquisition costs since the sustainment tail is in place. It also reduces the time to field intractable solutions to the battlefield from 10-14 years down to 1-3 years. It assures that the prototype involved is integrated with the latest technology, not dated technology due to lengthy acquisition delivery timelines.

About the Position:

The Information System Security Officer (ISSO) supports the Principal Investigator(s) in guiding key stakeholders in formulating requirements, advising alternative approaches, and conducting feasibility studies to support decision-making. The ISSO will have the responsibility for ensuring the security of project-specific information systems and data. They are responsible for identifying and managing risks, implementing security policies and procedures, and ensuring compliance with regulations such as HIPAA or General Data Protection Regulation (GDPR). Utilizing their knowledge of security standards and frameworks such as NIST, ISO 27001, or PCI DSS, they will manage the implementation of security controls, conduct security assessments, and provide guidance to other members of the team.

Responsibilities:

• Develop, implement, and maintain security policies, procedures, and controls to protect information systems and data confidentiality, integrity, and availability;
• Conduct security risk assessments, identify vulnerabilities and risks, and develop mitigation strategies;
• Monitor compliance with security policies, standards, and regulations, and report any non-compliance issues to management;
• Conduct security awareness and training programs for employees, contractors, and other stakeholders to promote a culture of security awareness;
• Respond to security incidents, conduct investigations, and implement remediation measures;
• Collaborate with other teams to ensure that security is integrated into developing, deploying, and maintaining information systems and data;
• Participate in security audits, assessments, and evaluations, and ensure that corrective actions are taken to address any identified issues;
• Stay up-to-date with the latest security trends, technologies, and regulations, and provide recommendations for improvement;
• Provide technical guidance and mentorship to team members on security best practices and standards; and
• Serve as the primary point of contact for security-related inquiries and incidents.

Required Qualifications:

• Bachelor's degree in related field, or an equivalent combination of education and experience;
• Experience in information security, including experience as an Information System Security Officer or a similar role (generally 5+ years);
• Experience in working with the Department of Defense (DoD), working within EMASS, and have a background in the Risk Management Framework (RMF);
• Experience with security technologies like firewalls, intrusion detection/prevention systems, encryption, and vulnerability scanners;
• Experience with security assessments, penetration testing, and incident response;
• Knowledge of security principles, standards, and regulations, such as NIST, FISMA, HIPAA, and PCI DSS;
• Excellent communication and collaboration skills, with ability to work effectively in a team environment;
• Effective problem-solving skills, with ability to identify and mitigate security risks; and
• Must be a US citizen with ability to obtain a Top Secret clearance.

Preferred Qualifications:

• Master's degree in related field;
• Experience with cloud security; and
• Certification in information security, such as CISSP, CISM, or CISA.

Instructions to Applicants:

For full consideration, applicants must apply for the Information System Security Officer at ; complete and submit the online application; and provide a cover letter, resume, a list of three professional references with contact information, and a statement of what diversity and inclusion mean to you.

Posting Open Date: December 5, 2023

For Full Consideration, Apply by: December 19, 2023

Open Until Filled?: Yes