What are the responsibilities and job description for the Information System Security Officer (ISSO) (TS/SCI-POLY Required) position at Best Value Technology, Inc. (BVTI)?
Clearance Requirements
- Must possess an active TS/SCI clearance with an active Polygraph. Both the clearance and polygraph need to be fully adjudicated. Interim clearances will not be accepted.
- U.S. citizenship is required to comply with the government contract.
Best Value Technology, Inc. (BVTI), a service-disabled veteran-owned small business (SDVOSB), is looking for an experienced Information System Security Officer (ISSO) to support our federal clients within the Intelligence Community on long-term, high-profile contracts. The ISSO will be responsible for interpreting and implementing all necessary procedures and policies to safeguard classified and sensitive information across designated networks, acting as the primary point of contact for computer security-related matters. In this role, the ISSO will provide comprehensive information system security support for the Directorate of Acquisition Management, which includes overseeing SSP processes, facilitating training and awareness initiatives, supporting physical security, conducting audits and continuous monitoring, managing incident and violation reporting and response, assessing risk, and supporting accreditation efforts.
Duties and Responsibilities
- Work alongside systems administrators to ensure that all information systems are operated, maintained, and disposed of in accordance with established security policies and practices.
- Coordinate with physical security personnel to ensure the physical protection of information security assets.
- Perform continuous monitoring of systems to ensure the systems stay accredited by performing software patching and updates.
- Conduct security audits of systems and initiate corrective actions if a security problem is discovered.
- Inform and coordinate with IT professionals when protective or corrective measures are needed to resolve security issues or meet security standards.
- Conduct risk assessments, actively document security problems, and provide strategic mitigation strategies.
- Evaluate proposed changes or additions to the information systems and advise the team of security relevance.
- Maintain documentation of the system administrators' PKI and PRIVAC status.
- Ensure the information systems remain in compliance with vulnerabilities and any other security-related notices.
- Review security engineering design and seek approval, support implementation, and testing for all aspects of IA and IS (InfoSec) engineering at all stages of the Systems Development Life Cycle (SDLC) process.
- Assess systems security threats/risks throughout the program life cycle and work with IT professionals to implement corrective action.
- Review and monitor security designs in hardware, software, data, and procedures.
- Performs systems certification and accreditation planning and testing, and liaison activities.
- Prepare and maintain C&A documentation such as SSP, Security CONOPS, ST&E reports, etc.
- Review various documents and files for transfer across systems or before release.
- Communicate with customers' security authorities to ensure compliance and negotiate proposed system or policy changes.
- Report the security status of information security to customers' ISSM.
- Ensure users and systems support personnel have the required security clearance and need-to-know to utilize the system.
- Conduct user training and awareness activities.
Required Education, Knowledge, and Skills
- Bachelor's Degree in a STEM field or an advanced degree in Cybersecurity.
- Minimum of five (5) years of experience in information security or risk management.
- Automated Information System (AIS) security experience with multiple IC SCI Control Systems, DoD Special Access Program (SAP)/Special Access Required (SAR) activities, and SCI Special Handling.
- An active technical certification compliant with DoD 8140.
- The following certifications are preferred:
- Certified Information Systems Security Professional (CISSP) Certification
- Certified Information Systems Auditor (CISA) Certification
- The following certifications are preferred:
The anticipated pay range for this position is $220k - $260k USD.
Salary Statement: The salary listed above serves as a general guideline; however, BVTI considers various factors when setting a base salary, including but not limited to the scope of responsibilities and the candidate's experience, education, knowledge, skills, competencies, contractual requirements, and work location.
Application Statement: The application period for the job is estimated to be 30 days from the job posting date. However, this timeline may be shortened or extended depending on business needs and the availability of qualified candidates.
EEO Statement: BVTI is an Equal Opportunity Employer and does not discriminate against any employee or applicant for employment on any legally protected basis.
This position is currently accepting applications.
Apply Now
BVTI does not discriminate on the basis of race, age, color, religion, national origin or ancestry, sex, disability, or veteran status. BVTI is an equal opportunity/equal access/affirmative action employer fully committed to achieving a diverse workforce and complies with all federal and state laws, regulations, and executive orders regarding non-discrimination and affirmative action.
Salary : $220,000 - $260,000