Information Assurance Subject Matter Expert

Provide Information Technology Security/Assurance Services in support of federal government client, in assessing the organization's information security posture.

Research, develop, implement, test and review organization's information security controls in order to protect information and prevent unauthorized access. Inform users about security measures, explain potential threats, implement security measures and monitor networks.

Define, create and maintain the documentation for Security Authorization of each information system in accordance with government requirements. Assess the impacts on system modifications and technological advances. Review systems in order to identify potential security weaknesses, recommend improvements to amend vulnerabilities, implement changes and document upgrades.

Standard workday is 8 hours / day; 40 hours per week.

Security: Active DoD Secret clearance is required

Location: Washington, DC (Hybrid remote)

Tasks include:

Conducting Security Authorization of GSSs and Applications
• Participate in Security Test and Evaluation of networks, operating systems, databases, and applications at various government offices.
• Development of Security Test and Evaluation Plans.
• Review and evaluate IT and Information Security operational procedures.
• Review and evaluation of Information Security Policies, Risk Assessment Reports, System Security Plans, Contingency Plans, Incident Response Plan, existing Security Test and Evaluation Plans/Reports, and other documentation.
• Review and determine weaknesses in the information security program.
• Conduct risk assessment to determine the level of risk to the IT environment.
• Assess security policies, standards, and guidelines.
• Identify vulnerabilities and provide corrective recommendations in the form of a Plan of Action and Milestone (POA&M).
• Review ATO packages for FedRAMP certified systems. Conduct monthly risk assessments reviews of FedRAMP certified systems.

Education Requirements:
• Preferably Bachelor's of Science in Engineering or Computer Science.
• At least one of these certifications CISSP, CISA, or CISM.

Experience Requirements:
• A minimum of seven (7) years IT experience with knowledge of federal government information security regulations and demonstrated hands-on security control assessment experience.
• A minimum of five (5) years experience in conducting Security Assessment and Authorization projects
• Working knowledge with NIST Special Publications 800-53, 800-53A, 800-37, and FISMA.
• Seasoned Security Analyst and having developed numerous Security Test and Evaluation plans and reports.

Benefits

Premier Enterprise Solutions offers full-time employees a comprehensive and competitive benefits package designed to support their health, well-being, and financial future. Benefits include paid time off (PTO) for vacation, sick leave, and personal days; paid holidays; medical, dental, and vision insurance; company-paid life and accidental death & dismemberment (AD&D) insurance; voluntary life insurance; short- and long-term disability coverage; professional training and development opportunities; and a 401(k) retirement plan with company matching and immediate vesting.