Information System Security Specialist III at INFORMATION SYSTEMS SOLUTIONS, INC

Charleston, South Carolina, United States -

Full Time

Start Date

Immediate

Expiry Date

16 Aug, 26

Salary

0.0

Posted On

18 May, 26

Experience

5 year(s) or above

Remote Job

Yes

Telecommute

Yes

Sponsor Visa

Skills

Cybersecurity Operations, NIST SP 800-53, Risk Management Framework, Security Control Assessment, Legal Compliance, System Security Plans, Risk Assessment, Contingency Planning, POA&M Evaluation, Interpersonal Skills, Written Communication, Problem Solving, Team Leadership, Critical Thinking, A&A/C&A, Security Metrics

Industry

IT Services and IT Consulting

Description

Description Information Systems Solutions, Inc, has an immediate opening for an Information System Security Specialist III to join our Security Control Assessment (SCA) team, in support of the National Science Foundation (NSF) Office of Polar Programs (OPP) United States Antarctic Program. The Information System Security Specialist III will be responsible for day-to-day cybersecurity operations, maintenance, and support of computer systems and networks. The ideal candidate will have a strong policy compliance background, excellent problem-solving skills, working knowledge of National Institutes of Standards and Technology (NIST) Special Publications (SP) 800-53 Revision 5, 800-39, 800-37 for Security Control Assessments, and the ability to ensure the reliability and security of IT infrastructure of the General Support System for USA. Traveling to onsite locations in Antarctica is possible. Specific duties include but are not limited to the following: • Assessment of security policies, procedures and processes against NIST standards. • Review of System Security Plans to report on compliance throughout the organization. • Provide Quarterly Reports of system security metrics. • Oversee implementation of all stages of the Risk Management Framework • Provide analysis and overviews of legal compliance documents • Collaborate with other SCA Team Members to assess the Confidentiality, Integrity and Availability of systems • Advise Program Management on risk levels and security posture • Recognize possible security violations and takes appropriate action to report the incident, as required. • Conduct reviews of system Contingency Plans trough tabletop exercises and simulated live exercises, including review of system Continuity of Operations Plan (COOP) • Ensure cybersecurity security requirements are appropriately identified in system environment operation procedures and collect and maintain data needed to meet system IA reporting requirements. • Evaluate system POA&Ms, tracking milestones • Prepare Risk Assessment Reports Why Work For ISS? At ISS we pride ourselves on providing an employee-focused and family first environment. Being a small business, we take the time to get to know our employees and have a vested interest in helping them achieve their career goals. We work to schedule regular social gatherings within the company to foster camaraderie. ISS values their employees by providing a comprehensive benefits package that includes a fully vested 401(k) matching program, coverage of family medical deductibles, spot bonuses, and educational assistance to further your career. Requirements Clearance Level Secret (preferred) Certifications (IAT Level II) One of the following: · Security+ CE · GIAC Security Essentials Certification (GSEC) · Security Certified Network Professional (SCNP) · System Security Certified Practitioner (SSCP) And Must be a U.S. citizen Required Skills • Five (5) years with bachelor’s degree or seven (7) years with HS/GED of practical experience demonstrating competency in Cybersecurity, Legal Compliance, Assessment & Authorization (A&A) or Certification & Accreditation (C&A) related fields. • Working knowledge of the Risk Management Framework (RMF) process. • Proficiency of evaluating security solutions to ensure they meet legal requirements. • Excellent interpersonal skills, ability to work in a team centric environment. • Strong verbal and written communication to effectively express concepts, plans, and presentations. • Strong self-starter requiring minimal supervision. Desired Skills: • Ability to organize, prioritize and meet deadlines. • Experience in Team Leadership role. • Certified Information Systems Professional (CISSP) or pathway to certification. • Capable of conveying complex information in a simplistic manner. • Strong critical thinking and problem-solving skills. • Able to take proactive measures to prevent problems rather than reactive by nature.

Responsibilities

Responsible for day-to-day cybersecurity operations, maintenance, and support of computer systems and networks for the NSF Office of Polar Programs. Key duties include assessing security policies against NIST standards, overseeing the Risk Management Framework, and preparing risk assessment reports.