TSA - Senior Information Systems Security Officer - ISSO

Job Category:Information Security Primary Location:USA-VA: VIRGINIA-ARLINGTONSchedule:Full-time Job Type:Standard Employee Status:RegularJob Posting: 2008-08-08Description: Essential Job Functions Designs audits of computer systems to ensure they are operating securely and that data is protected from both internal and external attack. Makes and implements recommendations for preventive measures as necessary. Assesses assigned system to determine system security status. Designs and implements security policies and procedures to ensures compliance to policies and procedures. Designs and conducts training for computer security education and awareness programs. Researches and evaluation emerging security trends and issue to ensure that education remains current and is continuously updated. Evaluates highly complex security systems according to industry best practices to safeguard internal information systems and databases. Defines security requirements and subsequently reviews complex systems to determine if they have been designed and established to comply with established standards. Develops and implements new standards as necessary. Leads investigations of security violations and breaches and recommends solutions; provides analysis summary to management and recommends alternative courses of action as necessary. Provides expert technical consultation on highly complex tasks; assists and/or provides limited direction to lower level technical personnel. Provides product recommendations of security packages to customers; Reviews vendor products and makes recommendations as appropriate. Conducts cost analyses to determine feasibility of new products for clients. ISSO will be appointed for Contractor owned systems that process, store, or transmit TSA data/information in support of services under the ITIP TO. This includes systems owned or managed by its subcontractors, partners, affiliates, consultants, suppliers, and any other business relationships that store, process, or transmit Government data or information used in the delivery or support of services under the Task Order. ISSOs will be responsible for the following : 1. Ensure security requirements are met for the systems assigned to them during their entire system development life cycle (SDLC). 2. Review the documentation for each of the systems they are assigned. 3. Be responsible for the systems' DR Plan and System Security Plan. 4. Determine when the system received their last Approval to Operate (ATO). 5. Determine which security requirements have not been met a. Conduct physical security inspection of facilities b. Request a risk analysis of assigned systems c. Coordinate technical review d. Coordinate vulnerability and penetration support 6. Update the Plans of Action & Milestone (POA&M) for appropriate network an system vulnerabilities. 7. Review any proposed change requests associated with their system and prepare impact assessment report. 8. Ensure DR testing is conducted. 9. Request and support C&A as necessary 10. Support incident response investigations and reporting that affect the systems assigned to them. 11. Responsible software compliance with licenses, for asset management by location, and use of asset management tools 12. Comply with TSA ISSO training requirements 13. Provide feedback reports when directed 14. Ensure security awareness training is provided and tailored to personnel using systems the ISSO is assigned. Basic Qualifications Bachelor's degree or equivalent combination of education and experience Bachelors degree in computer science, management information systems, or related field preferred CISSP certification preferred Nine or more years of experience in computer science, management information systems or data security experience Experience working with information security practices, networks, software, and hardware Experience working with computer programming Experience working with operating systems Experience working with computer desktop packages such as Microsoft Word, Excel, etc. Experience working with security architecture Other Qualifications Strong analytical and problem solving skills for resolving security issues Strong organization skills to balance work and lead projects Strong leadership skills to effectively mentor and lead junior level personnel Strong interpersonal skills to interact with customers and team members Strong communication skills to interact with team members and support personnel Strong skills implementing and configuring networks and network components Ability to work with relational databases Ability to work in a team environment Remote Work Location Authorized:No Relocation Assistance:Not AvailableClearance Level:Secret Create Success