Security Manager at Leonardo focusing on cyber compliance and risk management across OT and IT frameworks. Supporting clients in strategic initiatives and infrastructure assessments.
RI
Hybrid Information Systems Security Officer – SECRET CLEARANCE
Posted 2 weeks ago
About the role
- Information Systems Security Officer managing information assurance for federal clients in Suitland, MD. Overseeing security assessments and guiding compliance in cloud environments.
Responsibilities
- Serve as an Information Assurance SME for systems development projects in a cloud-based environment.
- Review proposed systems, networks, and software for potential security risks and advise on secure product selection and implementation.
- Define system scope and required level of detail for security plans and documentation.
- Manage and analyze Change Requests (CRs), assessing security impact and required updates to system posture.
- Provide Security Assessment & Authorization (SA&A) support for new and existing systems.
- Identify, develop, and maintain required security artifacts for authorization packages.
- Prepare and review System Security Plans (SSPs), including FIPS 199, FIPS 200, and E-Authentication documentation.
- Coordinate and participate in Security Test & Evaluation (ST&E) activities and review ST&E reports.
- Perform vulnerability assessment reviews and generate reports for System Owners and key stakeholders.
- Validate system hardening, patching, and compliance with applicable security requirements and checklists.
- Report status, findings, and risk posture to the Program Manager and Deputy Program Manager.
Requirements
- Active Secret clearance (REQUIRED).
- U.S. Citizenship required.
- Bachelor's degree in a technical field (e.g., Engineering, Computer Science) or 10 years of experience in IT systems engineering or IT security architecture.
- 6+ years of hands-on experience in information assurance or information security.
- Demonstrated ISSO experience supporting FISMA systems.
- Strong expertise in cloud architecture, cloud engineering, and cloud compliance.
- Ability to work in a hybrid environment (on-site and telework).
- Excellent interpersonal skills with demonstrated ability to collaborate across teams and organizations.
- Strong verbal and written communication skills in English.
- Certifications (Required) CISSP or equivalent security certification.
Job title
Job type
Experience level
Salary
Degree requirement
Tech skills
Location requirements
Senior Analyst leading cybersecurity governance initiatives at Elsevier. Developing and maturing governance programs for data protection and risk management across the organization.
Commercial Security Service Sales Executive promoting and selling security services at Johnson Controls. Building relationships and delivering solutions to protect people and property within assigned territories.
Security Incident Responder in a leading IT service company in Germany, responsible for analyzing and responding to IT security incidents while developing technological solutions.
Deputy ISSO leading compliance and security activities for NOAA systems at RCG. Requires active Secret clearance and CISSP certification with 8+ years of experience.
Technical Recruiter hiring for Snap Inc.'s security and machine learning teams. Full life cycle recruiting support for technical talent across Snap's innovations.
Team Leader ensuring security operations at ZF in Friedrichshafen. Leading a local team and managing on - site safety tasks.
Cloud Security Architect integrating cyber defense strategies across cloud platforms for Elevance Health. Lead collaboration with infrastructure and engineering teams to enhance security in cloud environments.
Senior Security Advisor designing advanced security solutions for Optiv’s clients. Driving sales and building relationships in a competitive cyber security landscape.
Personnel Security Specialist leading intake operations at PSI. Focused on case coordination, quality assurance, and team training for security suitability tasks.