SITEC, Information Systems Security Officer, Fort Liberty, NC

$86,000 - $138,000/Yr

Peraton - Liberty, NC

Full-time - Mid Level

Liberty, NC

Computing Infrastructure Providers, Data Processing, Web Hosting, and Related Services

About the position

The Information Systems Security Officer (ISSO) at Peraton is responsible for supporting the Special Operation Command Information Technology Enterprise Contract (SITEC) 3. This role involves maintaining the security and integrity of information systems for USSOCOM and its components, ensuring compliance with regulations, and managing IT risk. The ISSO will work closely with both technical and non-technical stakeholders to assess and improve IT controls, document findings, and implement continuous monitoring programs.

Responsibilities

• Work with a team of IT risk management assessors performing IT risk and controls assessments.
• Perform walkthrough interviews and maintain communication with client stakeholders, including Subject Matter Experts (SMEs).
• Request, obtain, review, and analyze various artifacts to assist in executing IT controls testing.
• Evaluate the design and operating effectiveness of IT controls using provided artifacts and industry-standard guidance.
• Document the results of IT controls test work in a consistent and high-quality manner.
• Summarize and communicate IT controls assessment results to client stakeholders, including senior leadership.
• Plan and execute day-to-day activities of IT controls assessments individually and as part of a team.
• Work with client personnel to analyze known IT control weaknesses and develop remediation plans.
• Provide subject matter expertise on IT controls and respond to ad-hoc requests from client personnel.
• Implement and manage continuous monitoring programs to ensure ongoing security of information systems.

Requirements

• Bachelor's degree with 8 years of experience or Master's degree with 6 years of experience in IT Risk Management, Information System Security, or Cybersecurity.
• 8570 AIT II certification.
• Active DoD TS clearance or above.
• 4 or more years of relevant experience related to IT Risk Management, Information System Security, and/or Cybersecurity.
• Extensive experience with Risk Management Framework (RMF) process and NIST 800-53.

Nice-to-haves

• Experience creating and updating Security Assessment and Authorization (SA&A) artifacts.
• Knowledge of FISMA, NIST SP 800 series, and other relevant Federal information assurance laws.
• Understanding of security frameworks like FedRAMP and DISA DCAS.
• Proficiency in eMASS.

Benefits

• Dental insurance
• Disability insurance
• Health insurance
• Paid holidays
• Paid parental leave
• Paid time off