Senior Information Security Specialist

Job Family:

Technology Consulting

Travel Required:

None

Clearance Required:

Active Top Secret (TS)

What You Will Do:
Guidehouse is seeking an Information Security Officer (ISSO) to support our federal client onsite full-time, ensuring the protection and defense of federal information and systems. In collaboration with the team to review the IT infrastructure of the agency. Utilizing your familiarity with relevant federal laws and regulations pertaining to government and national security IT systems to create Authority to Operate (ATO) and Authority to Test (ATT) packages for new and existing systems.

Duties include but are not limited to:

• Taking proactive security measures, assessing risks, and responding to security breaches.

• Monitor networks, databases, and computer systems and create a risk management plan for IT systems and assessing security practices and procedures

• Conduct Business Impact Analyses (BIAs) to identify critical business functions and assess the potential impact of disruptions to those functions on the organization's mission.

• Develop and maintain Information System Contingency Plans (ISCPs) to ensure the continuity of operations in the event of a disruption or disaster.

• Create and update System Security and Privacy Plans (SSPPs) for each information system, documenting the security controls and privacy safeguards implemented to protect the system and its data.

• Perform System Security Categorization in accordance with Federal Information Processing Standards (FIPS) to determine the appropriate level of security controls for each information system based on the potential impact of a security breach.

• Conduct Initial Privacy Assessments (IPAs) to identify and assess the privacy risks associated with the collection, use, and disclosure of personally identifiable information (PII) in information systems.

• Develop and execute Privacy Impact Assessments (PIAs) to thoroughly evaluate the impact of information systems on individual privacy and recommend mitigation strategies.

• Establish and manage Plans of Action and Milestones (POA&Ms) to track and remediate identified security vulnerabilities and privacy risks in a timely manner.

• Create and implement Incident Response Plans (IRPs) to effectively detect, respond to, and recover from security incidents and breaches.

• Prepare After Action Reports (AARs) following security incidents and exercises to document lessons learned and identify areas for improvement in security posture and incident response procedures.

What You Will Need:

• An ACTIVE and MAINTAINED Top Secret Federal or DoD security clearance; must UPGRADE and MAINTAIN a Top Secret with SCI (TS/SCI) Federal or DoD security clearance

• THREE (3) or more years of experience related to IT Security, Information Security, Information Assurance, Risk and Vulnerability and/or Cybersecurity

What Would Be Nice To Have:

• Bachelor’s Degree or Master’s degree (preferred)

• Experience with Risk Management Framework (RMF) process and NIST 800-37

• Experience creating and updating Security Assessment and Authorization (SA&A) artifacts such as FIPS 199, Contingency Plans (CP), Contingency Plan Tests (CPT), and System Security Plans (SSP).

• Understanding of other security frameworks like FedRAMP, HIPAA, and ISO  2700x.

• Certifications in CISSP, CAP, or Sec+

• Proficiency in Microsoft Excel, Word, and PowerPoint

The annual salary range for this position is $113,000.00-$188,000.00. Compensation decisions depend on a wide range of factors, including but not limited to skill sets, experience and training, security clearances, licensure and certifications, and other business and organizational needs.

What We Offer:

Guidehouse offers a comprehensive, total rewards package that includes competitive compensation and a flexible benefits package that reflects our commitment to creating a diverse and supportive workplace.

Benefits include:

• Medical, Rx, Dental & Vision Insurance

• Personal and Family Sick Time & Company Paid Holidays

• Position may be eligible for a discretionary variable incentive bonus

• Parental Leave and Adoption Assistance

• 401(k) Retirement Plan

• Basic Life & Supplemental Life

• Health Savings Account, Dental/Vision & Dependent Care Flexible Spending Accounts

• Short-Term & Long-Term Disability

• Student Loan PayDown

• Tuition Reimbursement, Personal Development & Learning Opportunities

• Skills Development & Certifications

• Employee Referral Program

• Corporate Sponsored Events & Community Outreach

• Emergency Back-Up Childcare Program

• Mobility Stipend

About Guidehouse
Guidehouse is an Equal Employment Opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, national origin, ancestry, citizenship status, military status, protected veteran status, religion, creed, physical or mental disability, medical condition, marital status, sex, sexual orientation, gender, gender identity or expression, age, genetic information, or any other basis protected by law, ordinance, or regulation.

Guidehouse will consider for employment qualified applicants with criminal histories in a manner consistent with the requirements of applicable law or ordinance including the Fair Chance Ordinance of Los Angeles and San Francisco.

If you have visited our website for information about employment opportunities, or to apply for a position, and you require an accommodation, please contact Guidehouse Recruiting at 1-571-633-1711 or via email at RecruitingAccommodation@guidehouse.com. All information you provide will be kept confidential and will be used only to the extent required to provide needed reasonable accommodation.

Guidehouse does not accept unsolicited resumes through or from search firms or staffing agencies. All unsolicited resumes will be considered the property of Guidehouse and Guidehouse will not be obligated to pay a placement fee.