Nortel Government Solutions (NGS) is one of the nation's strongest and most dynamic systems solutions providers. NGS specializes in the acquisition, design, engineering, evaluation, and development of advanced IT systems and data communications networks for information systems and applications. Our long tradition of success is attributable to the bright, driven professionals at NGS.

Nortel Government Solutions has an immediate opening for a Senior Information Systems Security Officer (ISSO) located in Washington, DC.
The Senior ISSO will support our Federal client in Washington, DC. Our client has an ongoing program to provide computer security guidelines and policies to their offices in the Washington, DC area. To address this requirement, our client is implementing a pilot program whereby one ISSO will be assigned to provide security support at their Washington, DC location. The ISSO duties and responsibilities include: • In conjunction with the local Automation Executive, and the local IT staff, advise users on matters of IT security strategy and implementation. • Coordinate the preparation of office telecommunications, data, and information system security plans. • Assist in keeping the local office security policies and guidance up to date. • Assist offices in developing and implementing the security recommendations contained in our client's Bulletins. • Assist with incorporating security best practices into office initiated projects and applications • Collaborate with the client's security office on all IT security assessments, strategies and initiatives • Develop security awareness training programs as needed • Attend security awareness and related training programs and conduct basic security assessments as appropriate • Identify and track vulnerabilities • Optimize the use of security and network management tool sets • Assist network managers and system administrators in the re dedication of identified risks • Verify the security compliance of the offices and become directly involved, with a hands-on approach, if that approach is needed • Support all applicable client security policies, directives, and mandates • Ensure that security requirements for offices' major application or general support system are being or will be met • Coordinate the updating of an office's Contingency Plan and, if needed, participate in testing the plan • Ensure risk analysis for court unit projects are completed to determine if cost-effective and essential security controls are in place• Understand the security risks from interconnecting the system to other systems• Coordinate the preparation of court unit system security plans• Report IT security incidents in accordance with established procedures• Report security incidents not involving IT resources to the appropriate security office• Support the appropriate IT security personnel in the preparation of security reports• Evaluate change recommendation to current networks and systems for their security impact• Provide oversight for Plan of Action and Milestone (POA&M) security issues for networks and systems• Provide technical review and recommendations for all risk assessments and vulnerability assessments conducted for a court unit's system or site• Provide security analysis of IT activities to ensure that appropriate security measures are in place and are being enforced• Provide oversight for penetration testing or other activities that might occur at/or traverse the system's infrastructure as part of a Security Test and Evaluation• Attend and/or lead status meetings with government personnel as needed• Applying NIST guidance in the design and delivery of Circuit-wide security awareness and training programs.• Develop and implement security policies, as directed, for office systems so they are compliant with all applicable client security policies, directives, and mandatesPeriodic local travel to offices within the Washington, DC region.
 
Requirements

Minimum Education/Experience: Bachelor's Degree in a computer or engineering related discipline.

Qualifications:

A total of ten (10) years of progressively responsible information system security experience or progressively responsible in support of Government or private sector computer systems, which includes: security design, development, test and evaluation.

The past five (5) years in Information System Security dealing directly with activities in support of testing, securing, and evaluating information management systems.

At least two (2) years experience must be in a Lead Information System Security Specialist, Lead Software Engineer or Project Engineer position requiring direct interface with upper management.

CISSP certification.

Must be a U.S. citizen.

Must reside within 50 miles of the work location.

Security Clearance:
Interim Secret or Secret Clearance Required