Information System Security Officer - Fairfax, United States - George Mason University

Description

Information System Security Officer

• 
  
  
• 
  Fairfax, VA
  
• 
  Research Staff
  
• 
  Opening on: Dec 5 2023
  

Add to favorites

Favorited

View favorites

Department: Col of Engineering and Computing

Classification: Research Staff 12-month

Job Category: Research Staff

Job Type: Full-Time

Work Schedule: Full-time (1.0 FTE, 40 hrs/wk)

Telework Friendly: Hybrid Eligible

Location: Fairfax

Salary: Salary commensurate with education and experience

Restricted: Yes

Criminal Background Check: Yes

Security Clearance Check: Yes

About the Center:

The Rapid Prototyping Research Center (RPRC) focuses on providing its Department of Defense (DoD) sponsors a unique perspective on rapid prototyping that aligns with Section 804 in the FY17 National Defense Authorization Act. Specifically, rather than developing a new system to satisfy intractable problems on the battlefield, the RPRC integrates new technology into existing infrastructure. This unique approach reduces acquisition costs since the sustainment tail is in place. It also reduces the time to field intractable solutions to the battlefield from 10-14 years down to 1-3 years. It assures that the prototype involved is integrated with the latest technology, not dated technology due to lengthy acquisition delivery timelines.

About the Position:

The Information System Security Officer (ISSO) supports the Principal Investigator(s) in guiding key stakeholders in formulating requirements, advising alternative approaches, and conducting feasibility studies to support decision-making. The ISSO will have the responsibility for ensuring the security of project-specific information systems and data. They are responsible for identifying and managing risks, implementing security policies and procedures, and ensuring compliance with regulations such as HIPAA or General Data Protection Regulation (GDPR). Utilizing their knowledge of security standards and frameworks such as NIST, ISO 27001, or PCI DSS, they will manage the implementation of security controls, conduct security assessments, and provide guidance to other members of the team.

Responsibilities:

• Develop, implement, and maintain security policies, procedures, and controls to protect information systems and data confidentiality, integrity, and availability;
• Conduct security risk assessments, identify vulnerabilities and risks, and develop mitigation strategies;
• Monitor compliance with security policies, standards, and regulations, and report any non-compliance issues to management;
• Conduct security awareness and training programs for employees, contractors, and other stakeholders to promote a culture of security awareness;
• Respond to security incidents, conduct investigations, and implement remediation measures;
• Collaborate with other teams to ensure that security is integrated into developing, deploying, and maintaining information systems and data;
• Participate in security audits, assessments, and evaluations, and ensure that corrective actions are taken to address any identified issues;
• Stay up-to-date with the latest security trends, technologies, and regulations, and provide recommendations for improvement;
• Provide technical guidance and mentorship to team members on security best practices and standards; and
• Serve as the primary point of contact for security-related inquiries and incidents.

Required Qualifications:

• Bachelor's degree in related field, or an equivalent combination of education and experience;
• Experience in information security, including experience as an Information System Security Officer or a similar role (generally 5+ years);
• Experience in working with the Department of Defense (DoD), working within EMASS, and have a background in the Risk Management Framework (RMF);
• Experience with security technologies like firewalls, intrusion detection/prevention systems, encryption, and vulnerability scanners;
• Experience with security assessments, penetration testing, and incident response;
• Knowledge of security principles, standards, and regulations, such as NIST, FISMA, HIPAA, and PCI DSS;
• Excellent communication and collaboration skills, with ability to work effectively in a team environment;
• Effective problem-solving skills, with ability to identify and mitigate security risks; and
• Must be a US citizen with ability to obtain a Top Secret clearance.

Preferred Qualifications:

• Master's degree in related field;
• Experience with cloud security; and
• Certification in information security, such as CISSP, CISM, or CISA.

Instructions to Applicants:

For full consideration, applicants must apply for the Information System Security Officer at ; complete and submit the online application; and provide a cover letter, resume, a list of three professional references with contact information, and a statement of what diversity and inclusion mean to you.

Posting Open Date: December 5, 2023

For Full Consideration, Apply by: December 19, 2023

Open Until Filled?: Yes

A Force for Innovation in the Heart of Northern Virginia's Technology Corridor:

The College of Engineering and Computing at George Mason University is comprised of the Volgenau School of Engineering and the School of Computing. The College is a fast-growing force for innovation in research and education. Ranked nationally in the top 100 in both undergraduate and graduate education, the College boasts more than 10,800 students in 37 undergraduate, master's, and doctoral degree programs, including several first-in-the-nation offerings. Of the 305 full-time faculty who comprise the College, 97 are tenured, 66 are tenure-track, 90 are instructional faculty, and 52 are research faculty. As part of a nationally ranked research university, its research teams expended $65 million in sponsored research awards in the past year and has projects with over $120 million in current and anticipated awards. The College stands out for its leading research in areas such as artificial intelligence, data analytics engineering, cybersecurity engineering, biomedical imaging and devices, community-based healthcare, autonomous systems, 5G/Next G communications, systems architectures, computational biomedicine, advanced materials and manufacturing, sustainable infrastructure, and more. The College encourages multidisciplinary research and provides ample opportunity for faculty to work with other disciplines.

George Mason University is the largest and most diverse public research university in Virginia, with an enrollment of over 40,000 students studying in over 200 degree programs. Mason is an innovative, entrepreneurial institution with national distinction in a range of academic fields. It was classified as an R1 research institution in 2016 by the Carnegie Classifications of Institutes of Higher Education. Mason has campuses in Fairfax, Arlington, and Prince William. Its proximity to Washington, D.C. provides unmatched geographical access to a number of federal agencies and national laboratories. Northern Virginia is also home to one of the largest concentrations of high-tech firms in the nation, providing excellent opportunities for interaction with industry. The region is consistently rated as being among the best places to live in the country, and has an outstanding local public school system.

In conjunction with Amazon's decision to establish a second headquarters in Northern Virginia, the Commonwealth of Virginia announced a multi-year plan to invest in the growth of degree programs in computing. George Mason University has committed to accelerate its plans to grow its capacity in computing and high-tech fields. Among the exciting initiatives being undertaken by the university are the launch of the Institute for Digital InnovAtion, a university think tank and incubator to serve the digital economy, and the expansion of its Arlington Campus with a planned 400,000 square foot building that will house the new Institute for Digital InnovAtion. These initiatives reflect hundreds of millions of dollars in new investment by Mason that will rapidly elevate the university's already leading national position in computing and related areas.