Information Systems Security Officer

Description

Leidos Dig Mod Health IT division is seeking an Information Systems Security Officer (ISSO) on a large network services opportunity supporting Health Agency in Montgomery County, MD.

Primary Responsibilities:

• Provide on-site support to the health agency in MD.

• Serve as the lead for all program Security Assessment and Authorization (SA&A) activities.

• Lead the evaluation of security solutions to ensure they meet security requirements for processing protected and sensitive information.

• This position will have manager responsibilities of up to 12 personnel.

• Coordinate with the cross-functional team for information system security software, hardware, and firmware updates.

• Propose, coordinate, implement, and enforce information systems security policies, standards, and methodologies.

• Provide support for maintaining the appropriate operational information assurance (IA) posture for the system.

• Develop and update the system security plan and other SA&A documentation.

• Assist with assessment, development and implementation of programs and controls set in place to preserve the integrity and security of sensitive data and information stored and processed by various network systems.

• Represent the program at regularly scheduled Agency governance review board meetings.

• Assist with cybersecurity defense and unauthorized access to information systems.

• Maintain incident response playbooks and serve as the program point of contact for security incidents.

• This position will have the accountability for the program SSP, cybersecurity governance and risk management, A&A compliance, vulnerability management and security configuration management.

• This position will have required contract deliverables due on a periodic basis.

• This position will have responsibility to ensure security posture supports the technical architecture roadmap.

• This position will work closely with the Sr architect manager to provide roadmap inputs.

Minimum Education and Experience:

• Bachelor's Degree in Computer Science, Information Systems, Engineering or other related discipline.

• Certified Systems Security Professional (CISSP) certification.

• 12-15 years of experience as an ISSO supporting a large enterprise network system, including experience maintaining System Security Plans (SSPs) and performing SA&A compliance activities.

• Deep technical understanding of core current cybersecurity technologies as well as emerging capabilities.

• Possess the knowledge of security best practices, security solutions, and methodologies for risk management per NIST Cybersecurity Framework guidelines.

• Demonstrated experience working in large Federal agency.

Desired Qualifications:

• Experience providing information security support for hybrid cloud solutions.

• ITIL 4 Foundation certification.

• Experience with systems employing Cisco routers, switches, and firewalls.

While subject to change based on business needs, Leidos reasonably anticipates that this job requisition will remain open for at least 3 days with an anticipated close date of no earlier than 3 days after the original posting date as listed above.

The Leidos pay range for this job level is a general guideline onlyand not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.