Job Purpose:
We are seeking an ISSO/System Administrator to ensure the security and compliance of our IT systems, aligned with TSA and DHS requirements. This role also includes systems administration duties, focusing on system maintenance and support.
Responsibilities:
- Implement and maintain security controls to protect IT infrastructure.
- Conduct regular security audits and risk assessments to identify vulnerabilities and mitigate threats.
- Ensure compliance with NIST, TSA, and DHS standards.
- Ensure systems are fully compliant with TSA and DHS security requirements.
- Develop, implement, and enforce security policies, procedures, and guidelines.
- Lead efforts in identifying, responding to, and mitigating security incidents.
- Develop and maintain incident response plans, ensuring quick recovery from breaches.
- Conduct risk assessments and vulnerability analyses to identify potential threats
- Implement risk mitigation strategies and document Plans of Action and Milestones (POAMs).
- Monitor security performance, review logs, and generate compliance reports.
- Provide insights and recommendations for security improvements based on findings.
- Work closely with IT, project management, and external partners to integrate security into system operations.
- Assist the Project Manager with project management tasks, such as scheduling and resource allocation.
- Assist in the installation, configuration, and maintenance of servers, networks, and other IT infrastructure.
- Provide technical support to ensure system efficiency and minimize downtime.
- Collaborate with partners to ensure that systems (e.g., Warehouse Management Information System) are properly configured, updated, and secured.
- Maintain and monitor the IT stack within the data room, ensuring systems are updated and secure.
- Perform regular system backups and develop disaster recovery plans to ensure data integrity and availability.
- Manage user accounts, permissions, and access controls.
- Maintain network security, ensuring secure configurations and monitoring network traffic to detect potential threats.
Education and Experience:
- Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field, or equivalent experience.
- 5+ years of experience as an Information Systems Security Officer (ISSO) or in a similar security role.
- Required: CISSP, CISM, CompTIA Security+, or equivalent.
- Preferred: CompTIA Network+, Microsoft Certified: Azure Administrator, or VMware Certified Professional (VCP).
- Proficiency in security tools and technologies such as SIEM, IDS/IPS, firewalls, and vulnerability management systems.
- Strong knowledge of NIST security controls, including Continuous Diagnostics and Mitigation (CDM).
- Experience with cloud services (AWS, Azure), operating systems (Windows, Linux), and virtualization (VMware, Hyper-V).
- Experience with compliance tools such as DHS Information Assurance and Compliance System (IACS) and Trusted Agent FISMA (TAF).
Skills:
- Proven expertise in incident response planning, risk assessments, and vulnerability mitigation.
- Experience in developing and enforcing security policies, procedures, and best practices.
- Strong verbal and written communication skills, with the ability to collaborate across teams and provide security awareness training.
- Ability to manage multiple responsibilities and adapt to evolving security threats and technologies.
Strativia understands that our staff is our number one asset. Therefore, we provide competitive salaries and health benefits along with a robust training and development plans to help ensure that our employees are happy and motivated. If you are interested in the opportunity above please contact us and join a dynamic, fun and, fast growing organization.
Strativia is an Equal Opportunity Employer and strives for diversity. Strativia in accordance with applicable law, does not discriminate in hiring or otherwise in employment on the basis of race, color, religion, sex, national origin, age, marital or veteran status, disability, sexual orientation, or any other legally protected status. EOE/AA/Vets
|
Strativia
Sep 20, 2024