Information System Security Officer, Senior (Secret)

Resource Management Concepts, Inc. (RMC) provides high-quality, professional services to government and commercial sectors. Our mission is to deliver exceptional management and technology solutions supporting the protection and preservation of the people and environment of the United States of America.

RMC is hiring an Information Security Analyst for the role of Information Security Systems Officer (ISSO) to support our Navy customer in Patuxent River, MD. The selected applicant will perform a variety of Information Assurance and Risk Management Framework (RMF) activities, including but not limited to:

• Serving as a Lead ISSO for a designated NAVAIR program.
• Coordinates and develops Authorization to Operated (ATO) packages for upcoming boundaries that need to be authorized
• Ensure systems comply with DoD security controls, Security Technical Implementation Guides (STIGs), and applicable policies.
• Track and document security-relevant changes to hardware, software, and firmware. Ensures Hardware and software profiles exist for each boundary are compliant.
• Managing day-to-day cybersecurity activities for the team, including the oversight of team of ISSOs and their assigned responsibilities.
• Creates Memorandums for the Record (MFRs) for any major changes to the boundaries. Submits these MFRs for review by the DAO.
• Performing duties of the Risk Management Framework (RMF) ISSO role, including:
• Developing RMF authorization packages.
• Performing validation activities for authorization packages.
• Preparing/Updating RMF documentation.
• Preparing IATTs and Use Case MFRs as required to support development and testing.
• Implementing a Cybersecurity Plan.
• Perform weekly validation of auditing to ensure audits have been completed for each boundary
• Performing Cyber Tabletop exercises.
• Performing asset and vulnerability management via VRAM reporting.
• Performing vulnerability assessments and system authorization activities through collaboration with SMEs (System Administrators, Network Admins, Lab Managers, Program Managers, and ISSMs).
• Performing system security assessments.
• Evaluating and reporting software IAW DITPR/DADMS requirements.
• Requirement is the candidate to be onsite 100% of the time in a classified government facility.