Information System Security Officer

Information System Security Officer The Opportunity: We’re looking for an Information System Security Officer (ISSO) responsible for assessing and requesting customer authorization for company-managed classified endpoints, servers, networks, and security appliances. This involves applying evolving U.S. Government cybersecurity policy and guidance. The ISSO ensures system, network, and security appliance auditing, virus scanning, and hardware and software configuration management requirements are executed as defined in customer-approved system assessment documentation and policy. Additionally, the ISSO monitors the activities of program system administrators to ensure all relevant security procedures are followed. The role also includes documenting clear and concise compliance criteria and test cases required to validate compliance with an evolving baseline of cybersecurity requirements and guidance from the National Institute of Standards and Technology (NIST), the Intelligence Community, and the DoD. Join us. The world can’t wait. You Have: Experience applying security systems concepts, requirements, design development, implementation, and integration to information systems Knowledge of Risk Management Framework (RMF), performing system assessment and authorization through a Governance, Risk, and Compliance (GRC) tool Knowledge of risk mitigation and selecting and designing security controls for implementation Knowledge of incident response and data loss prevention, detection, and response Knowledge of the NIST and Federal Information Security Management Act (FISMA) requirements for monitoring and reporting TS/SCI clearance with a polygraph HS diploma or GED DoD 8570 IAM Level II Certification Nice If You Have: Experience executing the analysis, design, and implementation of enterprise cybersecurity solutions Experience maintaining vulnerability scanning tool compliance and patch management, including ensuring IT staff pushes patches to all systems, maintaining compliance with directives, managing changes to the system, and assessing the security impact of the changes Experience engineering and implementing security-based solutions to further automate and improve the comprehensive security posture of systems and their supporting infrastructure Possession of excellent written and verbal communication skills DoD 8570 Certification such as CISSP, CISSP-ISSAP, or CISSP-ISSEP Certification Clearance: Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information; TS/SCI clearance with polygraph is required.

At Booz Allen, we celebrate your contributions, provide you with opportunities and choices, and support your total well-being. Our offerings include health, life, disability, financial, and retirement benefits, as well as paid leave, professional development, tuition assistance, work-life programs, and dependent care. Our recognition awards program acknowledges employees for exceptional performance and superior demonstration of our values. Full-time and part-time employees working at least 20 hours a week on a regular basis are eligible to participate in Booz Allen’s benefit programs. Individuals that do not meet the threshold are only eligible for select offerings, not inclusive of health benefits. We encourage you to learn more about our total benefits by visiting the Resource page on our Careers site and reviewing Our Employee Benefits page. Salary at Booz Allen is determined by various factors, including but not limited to location, the individual’s particular combination of education, knowledge, skills, competencies, and experience, as well as contract-specific affordability and organizational requirements. The projected compensation range for this position is $62,000.00 to $141,000.00 (annualized USD). The estimate displayed represents the typical salary range for this position and is just one component of Booz