Senior Security Information System Security Officer

- Strategize and oversee IT security programs and policies - Control and manage system alterations, assessing the security implications of relevant changes - Conduct security testing for code modifications and prepare/review documentation, including System Security Plans (SSPs), Risk Assessment Reports, Certification and Accreditation (C&A) packages, and System Requirements Traceability Matrices (SRTMs) - Provide Subject Matter Expertise (SME) for disaster recovery (DR) contingency plans (ISCP) - Draft advanced IT Security evaluations of audit outcomes - Facilitate the creation, updating, and closure of all Plans of Action and Milestones (POAMs), and establish security guidelines for new and existing DEA networks as required - Deliver IT Security analysis by assessing all System Change Requests (SCRs), reviewing vulnerability scan reports, and collaborating with technical SMEs to develop and monitor remediation plans - Utilize knowledge of NIST Publications (800-53, 800-37, 800-34, 800-60) and other pertinent security guidelines - Review, assess, and evidence NIST security controls for both classified and unclassified environments - Exhibit proficiency in DISA/STIGs, their implementation, and assessment.