Mantech

ManTech is seeking a motivated, career and customer-oriented Information System Security Officer to join our team at our Belcamp, Maryland location.

Responsibilities include but are not limited to:

• Oversee and implement security configurations, practices, and procedures for information systems (IS).

• Liaise between system owners and security personnel.

• Manage the complete lifecycle of security controls, ensuring effectiveness and compliance.

• Maintain continuous oversight of system security documentation.

• Conduct vulnerability scans as per risk assessment guidelines.

• Develop and manage POAMs in response to security vulnerabilities.

• Coordinate system owner approvals for corrective or mitigation actions.

• Monitor security controls to maintain ISs’ ATO status.

• Served primary focal point for System Security Programs

Minimum Qualifications:

• Lead and oversee the implementation of the government RMF process for our organization.

• Develop, review, and update ATO documentation, including System Security Plans (SSPs), Security Assessment Reports (SARs), and Plan of Actions and Milestones (POA&Ms).

• Conduct security assessments and vulnerability scans to identify and mitigate potential risks and vulnerabilities.

• Collaborate with cross-functional teams to ensure compliance with security policies, standards, and guidelines.

• Provide guidance and support in the design and implementation of security controls and measures.

• Stay updated with the latest cyber threats, vulnerabilities, and industry best practices to enhance the organization's security posture.

• Assist in incident response and conduct forensic analysis when necessary.

• Conduct security awareness training and promote a culture of security within the organization. ​

Preferred Qualifications:

• Certified Information System Security Professional, Certified Governance Risk and Compliance

Clearance Requirements:

• Active Top-Secret clearance with SCI eligibility

Physical Requirements:

• Stationary position 50% of the time.

• Occasional movement within the office.

• Operation of standard office equipment.

• Occasionally positions self to maintain computers, including under desks and in server closets.

• Frequent communication with team members and stakeholders.