M9 Solutions is seeking anInformation System Security Officer to workremotely on a government contract for a client located inArlington, VA.An active Secret clearance is required.

Responsibilities

• Responsible for ensuring the appropriate security posture is maintained for one or more information systems.
• Serve as the principal advisor on all matters related to information security of information systems which includes planning the appropriate security throughout the lifecycle of the system and ensuring continuous monitoring.
• Own the planning, monitoring, testing, and updating of system security plans for assigned information systems using controls from Cloud computing security requirements guide, and/or control libraries.
• Take ownership of issues discovered during security control and risk assessments by creating and managing plans of action through the project tools.
• Advise and inform the appropriate system owner, authorizing official, and management regarding issues or concerns regarding information systems.
• Investigate and document risks associated with information systems for management review and acceptance.
• Develop knowledge of information system threat sources, events, vulnerabilities, and likelihood of adverse impacts to the projects systems.
• Support authorizing officials with risk-based decision process by preparing appropriate system and risk documentation.
• Participate in the management of information security risks at the system and program levels.
• Work with people at different levels of technical knowledge and expertise.
• Create and maintain appropriate measures for an information security program in a highly audited environment.
• Evaluate and document information security risks and issues in both a qualitative and quantitative manner.
• Plan and manage information security remediation efforts.

Required Skills and Qualifications

• Work Authorization: US Citizenship is required.
• An active Secret clearance is required.
• Bachelor's degree in information assurance, computer science, or a similar technical field.
• Obtain a CISSP, CISM, or CCISO certification is required.
• Demonstrated experience creating system security plans.
• Experience with FedRAMP, application security, and cloud security.
• Ability to adjust to multiple demands, shifting priorities, ambiguity, and rapid change.
• Ability to work independently and with minimal direct supervision.
• Experience working in information security and understanding of information security concepts including technical, administrative, or managerial controls.
• Knowledge of information security policies / principles of handling and protecting information
• In-depth understanding of security documentation, security requirements, and its applications.
• Technical knowledge of operating systems, databases, networks, mobile technologies, and Cloud services.
• Skilled in executive level presentations and briefings.
• Experience managing communication with internal customers.
• Ability to collaborate with others to facilitate and enhance compliance with policies.
• Experience with coordinating tasks, allocating resources, and following tasks and projects through completion.
• Experience with Microsoft Office, GRC tools, and vulnerability scanning tools.
• High degree of cultural and emotionalintelligence, and demonstratedaptitude for resilience, flexibility, andability to adapt to changingcircumstances and dynamics.
• Ability to learn, understand, and demonstrate Agile methodology.
• Ability to communicate with clients and an assessor about security control implementation.
• Ability to be flexible with timelines and priorities and to give guidance to newer security staff.
• Ability to organize, structure, and prioritize information from various sources.
• Ability to appropriately balance needs of Information Security with business and technological risks and business impact.
• Ability to think creatively while accounting for multiple perspectives in any given scenario.
• Excellent written, presentation, interpersonal, collaborative,and verbal skills.