What are the responsibilities and job description for the Information Systems Security Officer position at take2it?
Job Title
Information Systems Security Officer
Overview
We are seeking a dedicated Information Systems Security Officer to join our team in Suitland, MD. In this role, you will develop, maintain, and update essential IT system accreditation documentation, ensuring compliance with security standards. You will provide on-site support for formal system testing and authorization activities, train IT personnel on security policies, and support ongoing system authorization efforts. This position offers an opportunity to contribute to critical cybersecurity initiatives within a dynamic environment.
Education Requirements
A bachelor’s degree in a relevant field of study is required. Candidates with equivalent experience may be considered in lieu of a degree.
Clearance Requirements
This role requires an active Secret clearance, or the ability to obtain and maintain one.
Work Arrangement
This is a on-site position located in Suitland, MD.
Responsibilities
- Develop, maintain, and update IT system accreditation documentation, including System Security Plans (SSP), Security Control Traceability Matrices (SCTM), Concepts of Operations (CONOPS), Authorization & Accreditation (A&A) artifacts, test plans, standard operating procedures (SOPs), and user guides
- Provide on-site Information Assurance (IA) support for formal system testing and A&A activities, ensuring compliance with security requirements
- Train and ensure all IT personnel adhere to established IA policies, procedures, and system-specific security requirements
- Support ongoing system authorization by providing qualified IA personnel to execute activities under the Risk Management Framework (RMF) Continuous Monitoring Plan
- Review and assess all proposed hardware and software changes for security impact
- Support configuration management processes by maintaining accurate system documentation and inventory
- Develop and recommend IA policies and procedures, deliver security training, and oversee compliance with cybersecurity standards
Required Qualifications
- 5 years of relevant experience in information security or related fields
- Experience developing and maintaining security documentation such as SSPs, SCTMs, and A&A artifacts
- Knowledge of the Risk Management Framework (RMF) and cybersecurity standards
- Ability to support formal system testing and accreditation activities on-site
- Strong understanding of configuration management and security impact assessments
- Excellent communication and training skills
Desired Skills
- Familiarity with security policies and procedures within government or defense environments
- Experience with security control assessments and continuous monitoring processes
- Ability to review hardware and software changes for security impact
- Knowledge of cybersecurity best practices and standards such as NIST SP 800-53
Why Apply
Join a team committed to safeguarding critical information systems and advancing cybersecurity initiatives. This role offers the chance to work on impactful projects in a collaborative environment, with opportunities for professional growth and development. If you’re ready to make a difference and meet the qualifications, we encourage you to apply today.