DFW stadium staffing services

Suggested jobs from other companies

• IDS International

  

  Bodyguard (OCONUS)

  3 days ago

  Arlington

  Job Description Bodyguard Why IDS? IDS believes in resolving conflict, building innovative approaches to do so. Combining operational expertise with an intimate understanding of today’s greatest challenges, we bring our customers the solutions required for success in a complex and multidimensional world. IDS tailors solutions for a diverse range of government, military, nonprofit, and public-sector clients. Outstanding past performance built IDS’s reputation as the leading provider of support for multifaceted operations. IDS is seeking experienced Bodyguards to provide protection to client, such as conducting advances of the client's movements and drive vehicles as required by the close protection plan. A Top-Secret security clearance is required for the role. This position is a 2-year contract and is located outside of the continental United States (OCONUS). Responsibilities: • Conduct advances of the client’s movements., • Provide protection to client and drive vehicles as required by the close protection plan., • Maintain all logbooks and administrative files as required by policy and the client., • Prepare written reports and logs to include security survey reports. Required Qualifications: • Active Top Secret Clearance, • High School Diploma or Higher, • Three (3) years of applicable professional security experience, • One (1) year experience in close protection assignments, • Able to use a computer including all common office management tools (e.g. Microsoft Office), • Experience with multiple levels of communication between various levels of management, • Have a valid U.S. driver's license with a clean driving record in the past 3 years Employee may be required to occasionally lift and/or move moderate amounts of weight, typically less than 20 pounds, but may vary depending on the position. Regular and predictable attendance is essential. Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, sexual orientation, gender identity, disability or protected veteran status, and any other characteristic protected by federal, state, and local law. If you are unable to apply through the portal and need to speak to someone about necessary accommodations to apply, please email and we will follow up with you. Do not submit resumes and applications through this email. Powered by JazzHR fYPhzC0qkV

• Zermount, Inc

  

  SYSTEM SECURITY COMPLIANCE OFFICER - MINI TEAM CAPTAIN

  28 days ago

  Arlington

  Job Description System Security ComPLIANCE OFFICER - MINI TEAM CAPTAIN MILITARY FRIENDLY & PREFERRED - HOH SPONSOR SUMMARY: Zermount Inc. is seeking a System Security Compliance Officer - Mini Team Captain who will perform complex risk analyses and ensure systems and technologies satisfy Information Assurance (IA) and Cybersecurity requirements, based on federal requirements, laws, mandates, policies, procedures, standards, and guidelines (e.g., EOs, OMB, BODs, NIST, and agency specific requirements). The Compliance Officer will provide Plan of Actions and Milestones (POA&M) management, conduct FISMA Compliance meetings, and work with Information Systems Security Officers (ISSO), System Owners (SO), stakeholders, and leadership to meet performance and scorecard metrics. The Compliance Officer will conduct regular (e.g., daily, weekly, monthly) system security compliance meetings for assigned systems of responsibility, provide feedback and recommended mitigations to ensure systems meet the minimum requirements and security posture. Support customer at the highest levels to ensure the implementation of doctrine and policies. DUTIES & RESPONSIBILITIES: The System Security Compliance Officer Mini Team Captain will provide the following support and services: • Perform Compliance reviews and analyses to verify compliance with federal requirements (e.g., EO, OMB Memos, A-130, NIST SP 800-37, 800-53, FIPS199, and FIPS-200, etc.)., • Perform analyses of security implementations for assigned systems pertaining to people, processes, and technologies, identify gaps and recommend solutions., • Conduct daily, weekly, monthly compliance monitoring of assigned systems for all RMF steps., • Conduct compliance assessments of assigned systems, based on the Zermount approved Compliance Support Services Framework., • Execute day to day FISMA compliance monitoring, ensuring that all FISMA activities, including Information Security Continuous Monitoring (ISCM), Continuous Diagnostic and Mitigation (CDM), and FISMA program activities assigned are prioritized correctly, completed on schedule, and are in accordance with Agency and organizations policies., • Research major obstacles related to the ever-changing FISMA requirements, which customers will need to overcome and provide recommendations., • Track system ATO status, security documentation expirations (Contingency Plan, Contingency Plan Test, Configuration Management Plans, Incident Response Plans, etc.) Information Security Vulnerability Management (ISVM) compliance, DHS Performance Plan requirements, audit efforts, and CDM support efforts., • Conduct analysis of system level POA&Ms and provide guidance and recommendations on potential mitigation to close current or delayed POA&Ms., • Track and report on whether assigned systems have mitigated their weaknesses on time using the appropriate processes and reporting timelines., • Track and report on whether mandated FISMA activities are being executed in accordance with the current DHS Information Security Performance Plan (ISPP) for the fiscal year., • Provide compliance monitoring metrics and reporting to Agency leadership., • Review the DHS Scorecard, for each assigned system, conduct analysis, and generate "Get to Green" reports., • Conduct Get-to-green meetings with SOs and ISSOs, provide status, deficiencies, recommendations, and document action items with estimated completion dates (ECDs) with the goal of improving system scores within the DHS Scorecard., • Manage ISVM alerts and bulletins for TSA systems to include tracking, distributing, and providing reports., • Support systems of responsibility to ensure all ISCM and CDM requirements are met and mitigations for failing requirements are identified and discussed to ensure a plan is established to meet all requirements defined. Provide monthly reports with action items for stakeholders and leadership., • Create briefings and reports, as required for, but not limited to the following items: high valued assets, ISVMs, POA&Ms, system scores (FISMA & ISCM)., • Provide input into the GRC presentations for monthly ISSO Townhall training, as required by management or the Communications & Training Team Lead., • Provide updates and input to the GRC SharePoint sites to include document uploads, page updates, access requests, permissions, etc. on an ongoing basis., • Create or update existing templates for memos, risk assessments, disposal packages, to standardize and simplify the process., • Conduct system compliance assessment to identify progress on ATO conditions, develop extension packages as required annotating analysis of system data / progress., • Conduct POA&M management activities, to include processing, reviewing, verifying, and validating creation and closures., • Report on expiring and overdue POA&Ms and ensure compliance with all DHS POA&M metrics and requirements as outlined in agency policy and the DHS ISPP., • Review waiver and risk acceptance requests for compliance with the Agency's Policies and Procedures., • Provide Quality Reviews of security documentation to ensure accuracy and compliance throughout the RMF process., • Support systems of responsibility to ensure all Ongoing Authorization (OA), requirements are met, and any deficiencies are identified and tracked. Monitor activities and ensure all deficiencies exceeding 30 days are identified as requiring a POA&M., • Assist with conducting review and analysis of Requests for Change (RFC) and providing recommendations to conduct risk assessment (as applicable) based on the change and/or Security Impact Assessment (SIA)., • Support Security Control Assessors (SCAs) as required for assigned systems., • Provide input and assist with all audits, data calls, and queries relating to assigned systems., • Stay current with the latest developments in cybersecurity, information assurance, GRC, and related cybersecurity trends., • Create or update existing templates such as memos, risk assessments, disposal packages, to standardize and simplify GRC processes., • Assist in completing customer's Management Control Objectives Program (MCOP) reporting requirements., • Provide Weekly status reporting to leadership, • Assist and support other team members as required by the Program Manager., • Experience and expert knowledge on NIST guidelines, FISMA, Cybersecurity principles and methodologies, Executive Orders (EO's), Office of Management and Budget (OMB) Memorandums, Federal, DoD and CISA Technical Reference Architectures, Maturity Models, Risk Management Framework (RMF), Cybersecurity Framework (CSF), technical knowledge of IT systems, and cloud security (is preferred)., • Knowledge of and experience using relevant cybersecurity and analysis tools such as Archer, Nessus Security Center, Splunk, etc., • Experience with cloud-based environments and technologies is preferred., • Knowledge of cybersecurity threats, risks, and vulnerabilities and how to mitigate them., • Excellent communication skills (written and verbal), with the ability to explain complex concepts in a clear, concise manner., • Strong problem-solving skills, proactive, ability to adapt to changes in priorities, attention to detail and organization skills, and possesses good problem solving and decision- making skills., • Must be able to conduct system analysis and quality reviews to detect performance issues., • Well versed in developing compliance solutions to resolve weaknesses or challenges., • Ability to work independently and as part of a team., • Minimum of a Bachelor of Science (or higher) in one of the following: computer engineering, computer science, IT, cyber security, or a related field and 7 years of IT Cybersecurity experience including direct support of the US government and 4 years acting as an ISSO, Assessor, or Compliance Analyst., • 8:00 am EST - 4:30 pm EST.

• BAM Technologies, LLC

  

  Cybersecurity Manager

  9 days ago

  Arlington

  Job DescriptionCybersecurity ManagerBAM is a dynamic, multi-disciplinary firm with leading-edge skills in information technology, software development and applied research. Serving government and commercial markets, BAM is committed to its customers and to delivering strong leadership, sound solutions, and innovative thinking. BAM is seeking a Cybersecurity Manager to join its team. The Cybersecurity Manager is responsible for developing, implementing, and overseeing the organization’s cybersecurity strategy to protect digital assets, networks, and sensitive data. This role involves managing cybersecurity team activities, coordinating incident response efforts, ensuring compliance with regulatory standards, and staying ahead of emerging threats. The manager plays a critical role in maintaining business continuity and safeguarding the organization's reputation. Key Responsibilities: • Lead the cybersecurity team in implementing and maintaining security measures., • Develop and enforce cybersecurity policies, procedures, and protocols., • Ensure compliance with relevant cybersecurity standards such as RMF, NIST SP 800-53, and CMMC., • Oversee risk assessments, vulnerability scans, and penetration tests., • Monitor network traffic and systems for suspicious activity., • Manage incident response and remediation efforts., • Oversee deployment and maintenance of security tools (e.g., firewalls, IDS/IPS, SIEM)., • Collaborate with IT, legal, and business units to integrate security into operations., • Conduct security awareness training and promote a security-first culture., • Report regularly to senior leadership on cybersecurity posture and incidents., • Manage relationships with third-party vendors and ensure their compliance with security policies.Required Qualifications:, • Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or related field., • 5+ years of experience in cybersecurity, with at least 2 years in a leadership role., • Strong knowledge of cybersecurity frameworks (NIST, ISO 27001, CIS Controls)., • Experience with security technologies: firewalls, SIEM, antivirus, encryption, VPNs., • Proficiency in incident response, risk management, and disaster recovery planning., • Excellent leadership, communication, and analytical skills., • Relevant certifications: Security+, CEH, or equivalent.Preferred Qualifications:, • Master’s degree in Cybersecurity or related field., • Experience with cloud security (AWS, Azure, Google Cloud)., • Familiarity with Zero Trust Architecture and DevSecOps practices., • Knowledge of regulatory compliance (GDPR, CCPA, HIPAA)., • Experience with threat intelligence platforms and advanced persistent threats (APT). mVTRhYccFn

• Hiring Our Heroes

  

  System Security Compliance Officer Sr- MINI TEAM CAPTAIN

  1 year ago

  Arlington

  Job Description System Security ComPLIANCE OFFICER SR MINI TEAM CAPTAIN MILITARY FRIENDLY & PREFERRED - HOH SPONSOR Zermount Inc. is seeking a Senior Compliance Officer Mini Team Captain who will perform complex risk analyses and ensure systems and technologies satisfy Information Assurance (IA) and Cybersecurity requirements, based on federal requirements, laws, mandates, policies, procedures, standards, and guidelines (e.g., EOs, OMB, BODs, NIST, and agency specific requirements). The Compliance Officer will provide Plan of Actions and Milestones (POA&M) management, conduct FISMA Compliance meetings, and work with Information Systems Security Officers (ISSO), System Owners (SO), stakeholders, and leadership to meet performance and scorecard metrics. The Compliance Officer will conduct regular (e.g., daily, weekly, monthly) system security compliance meetings for assigned systems of responsibility, provide feedback and recommended mitigations to ensure systems meet the minimum requirements and security posture. Support customer at the highest levels to ensure the implementation of doctrine and policies. Duties & Responsibilities: The Senior Compliance Officer Mini Team Captain will provide the following support and services: • Perform Compliance reviews and analyses to verify compliance with federal requirements (e.g., EO, OMB Memos, A-130, NIST SP 800-37, 800-53, FIPS199, and FIPS-200, etc.)., • Perform analyses of security implementations for assigned systems pertaining to people, processes, and technologies, identify gaps and recommend solutions., • Conduct daily, weekly, monthly compliance monitoring of assigned systems for all RMF steps., • Conduct compliance assessments of assigned systems, based on the Zermount approved Compliance Support Services Framework., • Execute day to day FISMA compliance monitoring, ensuring that all FISMA activities, including Information Security Continuous Monitoring (ISCM), Continuous Diagnostic and Mitigation (CDM), and FISMA program activities assigned are prioritized correctly, completed on schedule, and are in accordance with Agency and organizations policies., • Research major obstacles related to the ever-changing FISMA requirements, which customers will need to overcome and provide recommendations., • Track system ATO status, security documentation expirations (Contingency Plan, Contingency Plan Test, Configuration Management Plans, Incident Response Plans, etc.) Information Security Vulnerability Management (ISVM) compliance, DHS Performance Plan requirements, audit efforts, and CDM support efforts., • Conduct analysis of system level POA&Ms and provide guidance and recommendations on potential mitigation to close current or delayed POA&Ms., • Track and report on whether assigned systems have mitigated their weaknesses on time using the appropriate processes and reporting timelines., • Track and report on whether mandated FISMA activities are being executed in accordance with the current DHS Information Security Performance Plan (ISPP) for the fiscal year., • Provide compliance monitoring metrics and reporting to Agency leadership., • Review the DHS Scorecard, for each assigned system, conduct analysis, and generate "Get to Green" reports., • Conduct Get-to-green meetings with SOs and ISSOs, provide status, deficiencies, recommendations, and document action items with estimated completion dates (ECDs) with the goal of improving system scores within the DHS Scorecard., • Manage ISVM alerts and bulletins for TSA systems to include tracking, distributing, and providing reports., • Support systems of responsibility to ensure all ISCM and CDM requirements are met and mitigations for failing requirements are identified and discussed to ensure a plan is established to meet all requirements defined. Provide monthly reports with action items for stakeholders and leadership., • Create briefings and reports, as required for, but not limited to the following items: high valued assets, ISVMs, POA&Ms, system scores (FISMA & ISCM)., • Provide input into the GRC presentations for monthly ISSO Townhall training, as required by management or the Communications & Training Team Lead., • Provide updates and input to the GRC SharePoint sites to include document uploads, page updates, access requests, permissions, etc. on an ongoing basis., • Create or update existing templates for memos, risk assessments, disposal packages, to standardize and simplify the process., • Conduct system compliance assessment to identify progress on ATO conditions, develop extension packages as required annotating analysis of system data / progress., • Conduct POA&M management activities, to include processing, reviewing, verifying, and validating creation and closures., • Report on expiring and overdue POA&Ms and ensure compliance with all DHS POA&M metrics and requirements as outlined in agency policy and the DHS ISPP., • Review waiver and risk acceptance requests for compliance with the Agency's Policies and Procedures., • Provide Quality Reviews of security documentation to ensure accuracy and compliance throughout the RMF process., • Support systems of responsibility to ensure all Ongoing Authorization (OA), requirements are met, and any deficiencies are identified and tracked. Monitor activities and ensure all deficiencies exceeding 30 days are identified as requiring a POA&M., • Assist with conducting review and analysis of Requests for Change (RFC) and providing recommendations to conduct risk assessment (as applicable) based on the change and/or Security Impact Assessment (SIA)., • Support Security Control Assessors (SCAs) as required for assigned systems., • Provide input and assist with all audits, data calls, and queries relating to assigned systems., • Stay current with the latest developments in cybersecurity, information assurance, GRC, and related cybersecurity trends., • Create or update existing templates such as memos, risk assessments, disposal packages, to standardize and simplify GRC processes., • Assist in completing customer's Management Control Objectives Program (MCOP) reporting requirements., • Provide Weekly status reporting to leadership, • Assist and support other team members as required by the Program Manager., • Provide Leadership and Mentoring 2-3 compliance officers Qualifications: • Experience and expert knowledge on NIST guidelines, FISMA, Cybersecurity principles and methodologies, Executive Orders (EO's), Office of Management and Budget (OMB) Memorandums, Federal, DoD and CISA Technical Reference Architectures, Maturity Models, Risk Management Framework (RMF), Cybersecurity Framework (CSF), technical knowledge of IT systems, and cloud security (is preferred)., • Knowledge of and experience using relevant cybersecurity and analysis tools such as Archer, Nessus Security Center, Splunk, etc., • Experience with cloud-based environments and technologies is preferred., • Knowledge of cybersecurity threats, risks, and vulnerabilities and how to mitigate them., • Excellent communication skills (written and verbal), with the ability to explain complex concepts in a clear, concise manner., • Strong problem-solving skills, proactive, ability to adapt to changes in priorities, attention to detail and organization skills, and possesses good problem solving and decision- making skills., • Must be able to conduct system analysis and quality reviews to detect performance issues., • Well versed in developing compliance solutions to resolve weaknesses or challenges., • Ability to work independently and as part of a team., • An analytical mind with excellent problem-solving ability is required. Education and/or Experience: • Minimum of a Bachelor of Science (or higher) in one of the following: computer engineering, computer science, IT, cyber security, or a related field and 7 years of IT Cybersecurity experience including direct support of the US government and 4 years acting as an ISSO, Assessor, or Compliance Analyst., • Business Hours: 8:00 am EST - 4:30 pm EST.

• gTANGIBLE Corporation

  

  Information Systems Security Manager (ISSM) III

  28 days ago

  Arlington

  Job Description gTANGIBLE Corporation (gTC), , is a S corporation and a registered Government contractor that provides services and solutions in: • National Security Programs, • Professional, Administrative, and Management Support, • Mission and Warfighter Support We are a Service Disabled Veteran Owned Small Business (SDVOSB) and the founder has years of successful experience in the Government contracting arena. Our leadership team is an exceptional group of Government contracting professionals. gTANGIBLE is in the process of identifying candidates for the following position. Requisition Type: Contingent (Open) Position Status: Full Time Position Title: Information Systems Security Manager (ISSM) III Location: Arlington, VA Security Clearance Level: Top Secret/SCI, SAP Information eligible, consent for Counterintelligence polygraph Duties and Responsibilities The Air Force (AF) Special Access Program (SAP) Security Support Services (SSS) assists the AF cognizant security authority in oversight of enhanced National Security Objectives supporting AF SAP interests through active and integrated security operations, processes, mechanisms, and management. This support provides multi- disciplinary security support, including specialized analytical/program protection support, while being responsive and flexible to dynamic SAP security situations. The ISSM's primary function serves as a principal advisor on all matters, technical and otherwise, involving the security of information systems under their purview. Primary support will be working within Special Access Programs (SAPs) supporting Department of Defense (DoD) agencies, such as HQ Air Force, Office of the Secretary of Defense, and Military Compartment efforts. The position will provide "day-to-day" support for Collateral, Sensitive Compartmented Information (SCI) and Special Access Program (SAP) activities. Duties include the following: • Advise customer on Risk Management Framework (RMF) assessment and authorization issues., • Perform risk assessments and make recommendations to DoD agency customers., • Advise government program managers on security testing methodologies and processes., • Evaluate authorization documentation and provide written recommendations for authorization to government PMs., • Develop and maintain a formal Information Systems Security Program., • Ensure that all IAOs, network administrators, and other cyber security personnel receive the necessary technical and security training to carry out their duties., • Develop, review, endorse, and recommend action by the AO or DAO of system assessment documentation., • Ensure approved procedures are in place for clearing, sanitizing, and destroying various types of hardware and media., • Develop and execute security assessment plans that include verification that the features and assurances required for each protection level functioning., • Maintain a and/or applicable repository for all system authorization documentation and modifications., • Institute and implement a Configuration Control Board (CCB) charter., • Develop policies and procedures for responding to security incidents, to include investigating and reporting security violations and incidents., • Ensure proper protection or corrective measures have been taken when an incident or vulnerability has been discovered within a system., • Ensure that data ownership and responsibilities are established for each authorization boundary, to include accountability, access rights, and special handling requirements., • Ensure development and implementation of an information security education, training, and awareness program, to include attending, monitoring, and presenting local cyber security training., • Evaluate threats and vulnerabilities to ascertain whether additional safeguards are needed., • Assess changes in the system, its environment, and operational needs that could affect the authorization., • Ensure that authorization is accomplished a valid Authorization determination has been given for all authorization boundaries under your purview., • Review AIS assessment plans., • Coordinate with PSO or cognizant security official on approval of external information systems (e.g., guest systems, interconnected system with another organization)., • Conduct periodic assessments of the security posture of the authorization boundaries., • Ensure configuration management (CM) for security-relevant changes to software, hardware, and firmware and that they are properly documented., • Ensure periodic testing is conducted to evaluate the security posture of IS by employing various intrusion/attack detection and monitoring tools (shared responsibility with ISSOs)., • Ensure that system recovery and reconstitution processes developed and monitored to ensure that the authorization boundary can be recovered based on its availability level determination., • Ensure all authorization documentation is current and accessible to properly authorized individuals., • Ensure that system security requirements are addressed during all phases of the system life cycle., • Develop Assured File Transfers (AFT) on accordance with the JSIG., • Periodically review system security to accommodate changes to policy or technology., • Coordinate all technical security issues outside of area of expertise or responsibility with ISSE., • Provide expert research and analysis in support of expanding programs and area of responsibility as it pertains to cyber security and information technologies activities., • Establish and develop a self-inspection program within the organization Performance elements., • Provide leadership, mentoring, and quality assurance for Cyber Security and Information Technology team members., • Lead, cultivate and maintain productive working relationships with other DoD agencies managers, data stewards, and senior leadership to foster productive and positive cyber security profile., • Participate in the strategic planning and implementation of the Cyber Security Program., • Provide expert input to the formulation of cyber security policies based upon the Risk Management Framework (RMF) with emphasize on Joint Special Access Program Implementation Guide (JSIG) authorization process., • Master's degree and 10 years of related experience or 16 years of related experience without a degree., • Prior performance in roles such as ISSO or ISSM., • Must meet position and certification requirements outlined in DoD Directive 8570.01-M for Information Assurance Technician Level 3 or Information Assurance Manager Level 3 within 6 months of the date of hire., • Must having working knowledge of DoD, National and applicable service and agency security policy, manuals and standards., • Minimum of 2 years of SAP experience required. Equal Opportunity Employer/Veterans/Disabled.

• Soteria Aviation Services

  

  Supervisor of Aviation Security Operations (SASO)

  7 days ago

  Arlington

  Job Description We are seeking a strategic, results-driven Supervisor of Aviation Security Operations to lead its comprehensive security program at a major international airport and across flight operations. This position will report to the Chief Security Officer of Atlas Management Services and oversee a large team of Aviation Security Officers. The ideal candidate will have extensive experience in aviation security management, explosive threat detection, regulatory compliance, and leading complex operations. The Supervisor will ensure adherence to TSA, airport, and international standards while driving process improvement, team development, and risk mitigation. Key Responsibilities · Direct daily operations of the Aviation Security Officer workforce in coordination with the Chief Security Officer. · Lead multi-team operations, delivering training, oversight, and mission support for all assigned flights. · Ensure adherence to TSA, airport, and federal regulations through standard operating procedures. · Conduct regular risk assessments and implement mitigation strategies to ensure operational continuity. · Liaise with Airport Authority stakeholders and law enforcement to support secure airport operations. · Resolve ambiguity by aligning team priorities with short-term goals and long-term strategy. · Develop and implement quality control and security improvement initiatives. · Serve as the primary liaison during TSA inspections, regulatory reviews, and audits. · Monitor, guide, and evaluate subordinate staff and aircrew performance. · Enforce HR and company policies regarding payroll, recruitment, attendance, and performance. · Conduct operational briefings and coordinate resource deployment. · Protect company assets including equipment, technology, and vehicles. · Recruit and manage a workforce strategy aligned to long-term operational needs. · Support talent development, mentoring, and ongoing performance management of staff. · Establish clear success metrics, priorities, and communication channels across operations. · Escalate high-risk security matters to executive leadership and respond to immediate threats. Skills and Qualifications · U.S. Citizen · Valid state-issued driver’s license or REAL ID-compliant identification. · Minimum 15 years of relevant experience in aviation security or operational leadership. · Resides within a 45-minute commuting radius of the designated international airport. · Bachelor’s degree or equivalent operational experience at the government or enterprise level. · Recent (within 5 years) experience managing a major security or screening program. · In-depth knowledge of aviation security systems, procedures, and screening technologies. · AAAE ACE or CM Security Certification (or obtained within six months of hire). · Available for flexible scheduling, including weekends and holidays, based on mission needs. · Eligible to pass a 10-year verifiable background check (employment, education, references). · Able to obtain and maintain SIDA badge and Customs seal clearance. · Demonstrated success in leading security teams of 50+ personnel. · Experience in Aviation Screening, Explosives Detection, or Critical Logistics. · Track record of building and scaling enterprise-level training programs. · Proven capability in implementing technical and process improvements. · Preferred background in DHS, military, special operations, or law enforcement. Regulatory Compliance This role is regulated by the Transportation Security Administration (TSA) and requires access to U.S. Customs and Border Protection (CBP) controlled areas. The candidate must be able to meet all federal credentialing requirements. Physical and Environmental Requirements · Work occurs in indoor/outdoor environments with exposure to noise, chemicals, and mechanical hazards. · Visual and auditory acuity required (with or without correction); exposure to noise levels up to 120 decibels. · Ability to stand for prolonged periods and lift up to 50 pounds unassisted. · Capable of climbing, stooping, kneeling, crawling, and walking on uneven surfaces as needed. · Frequent sitting, standing, and movement throughout operational zones. · Must follow HR policies, legal standards, and ethical practices including inclusive leadership and effective prioritization. Equal Employment Opportunity Statement

• Zermount, Inc

  

  SYSTEM SECURITY COMPLIANCE OFFICER - SR

  3 months ago

  Arlington

  Job Description System Security ComPLIANCE OFFICER - SR MILITARY FRIENDLY & PREFERRED - HOH SPONSOR SUMMARY: Zermount Inc. is seeking a System Security Compliance Officer - SR who will perform complex risk analyses and ensure systems and technologies satisfy Information Assurance (IA) and Cybersecurity requirements, based on federal requirements, laws, mandates, policies, procedures, standards, and guidelines (e.g., EOs, OMB, BODs, NIST, and agency specific requirements). The Compliance Officer will provide Plan of Actions and Milestones (POA&M) management, conduct FISMA Compliance meetings, and work with Information Systems Security Officers (ISSO), System Owners (SO), stakeholders, and leadership to meet performance and scorecard metrics. The Compliance Officer will conduct regular (e.g., daily, weekly, monthly) system security compliance meetings for assigned systems of responsibility, provide feedback and recommended mitigations to ensure systems meet the minimum requirements and security posture. Support customer at the highest levels to ensure the implementation of doctrine and policies. DUTIES & RESPONSIBILITIES: The System Security Compliance Officer - SR will provide the following support and services: • Perform Compliance reviews and analyses to verify compliance with federal requirements (e.g., EO, OMB Memos, A-130, NIST SP 800-37, 800-53, FIPS199, and FIPS-200, etc.)., • Perform analyses of security implementations for assigned systems pertaining to people, processes, and technologies, identify gaps and recommend solutions., • Conduct daily, weekly, monthly compliance monitoring of assigned systems for all RMF steps., • Conduct compliance assessments of assigned systems, based on the Zermount approved Compliance Support Services Framework., • Execute day to day FISMA compliance monitoring, ensuring that all FISMA activities, including Information Security Continuous Monitoring (ISCM), Continuous Diagnostic and Mitigation (CDM), and FISMA program activities assigned are prioritized correctly, completed on schedule, and are in accordance with Agency and organizations policies., • Research major obstacles related to the ever-changing FISMA requirements, which customers will need to overcome and provide recommendations., • Track system ATO status, security documentation expirations (Contingency Plan, Contingency Plan Test, Configuration Management Plans, Incident Response Plans, etc.) Information Security Vulnerability Management (ISVM) compliance, DHS Performance Plan requirements, audit efforts, and CDM support efforts., • Conduct analysis of system level POA&Ms and provide guidance and recommendations on potential mitigation to close current or delayed POA&Ms., • Track and report on whether assigned systems have mitigated their weaknesses on time using the appropriate processes and reporting timelines., • Track and report on whether mandated FISMA activities are being executed in accordance with the current DHS Information Security Performance Plan (ISPP) for the fiscal year., • Provide compliance monitoring metrics and reporting to Agency leadership., • Review the DHS Scorecard, for each assigned system, conduct analysis, and generate "Get to Green" reports., • Conduct Get-to-green meetings with SOs and ISSOs, provide status, deficiencies, recommendations, and document action items with estimated completion dates (ECDs) with the goal of improving system scores within the DHS Scorecard., • Manage ISVM alerts and bulletins for TSA systems to include tracking, distributing, and providing reports., • Support systems of responsibility to ensure all ISCM and CDM requirements are met and mitigations for failing requirements are identified and discussed to ensure a plan is established to meet all requirements defined. Provide monthly reports with action items for stakeholders and leadership., • Create briefings and reports, as required for, but not limited to the following items: high valued assets, ISVMs, POA&Ms, system scores (FISMA & ISCM)., • Provide input into the GRC presentations for monthly ISSO Townhall training, as required by management or the Communications & Training Team Lead., • Provide updates and input to the GRC SharePoint sites to include document uploads, page updates, access requests, permissions, etc. on an ongoing basis., • Create or update existing templates for memos, risk assessments, disposal packages, to standardize and simplify the process., • Conduct system compliance assessment to identify progress on ATO conditions, develop extension packages as required annotating analysis of system data / progress., • Conduct POA&M management activities, to include processing, reviewing, verifying, and validating creation and closures., • Report on expiring and overdue POA&Ms and ensure compliance with all DHS POA&M metrics and requirements as outlined in agency policy and the DHS ISPP., • Review waiver and risk acceptance requests for compliance with the Agency's Policies and Procedures., • Provide Quality Reviews of security documentation to ensure accuracy and compliance throughout the RMF process., • Support systems of responsibility to ensure all Ongoing Authorization (OA), requirements are met, and any deficiencies are identified and tracked. Monitor activities and ensure all deficiencies exceeding 30 days are identified as requiring a POA&M., • Assist with conducting review and analysis of Requests for Change (RFC) and providing recommendations to conduct risk assessment (as applicable) based on the change and/or Security Impact Assessment (SIA)., • Support Security Control Assessors (SCAs) as required for assigned systems., • Provide input and assist with all audits, data calls, and queries relating to assigned systems., • Stay current with the latest developments in cybersecurity, information assurance, GRC, and related cybersecurity trends., • Create or update existing templates such as memos, risk assessments, disposal packages, to standardize and simplify GRC processes., • Assist in completing customer's Management Control Objectives Program (MCOP) reporting requirements., • Provide Weekly status reporting to leadership, • Experience and expert knowledge on NIST guidelines, FISMA, Cybersecurity principles and methodologies, Executive Orders (EO's), Office of Management and Budget (OMB) Memorandums, Federal, DoD and CISA Technical Reference Architectures, Maturity Models, Risk Management Framework (RMF), Cybersecurity Framework (CSF), technical knowledge of IT systems, and cloud security (is preferred)., • Knowledge of and experience using relevant cybersecurity and analysis tools such as Archer, Nessus Security Center, Splunk, etc., • Experience with cloud-based environments and technologies is preferred., • Knowledge of cybersecurity threats, risks, and vulnerabilities and how to mitigate them., • Excellent communication skills (written and verbal), with the ability to explain complex concepts in a clear, concise manner., • Strong problem-solving skills, proactive, ability to adapt to changes in priorities, attention to detail and organization skills, and possesses good problem solving and decision- making skills., • Must be able to conduct system analysis and quality reviews to detect performance issues., • Well versed in developing compliance solutions to resolve weaknesses or challenges., • Ability to work independently and as part of a team., • An analytical mind with excellent problem-solving ability is required., • Design, develop, engineer, and implement solutions to MLS requirements., • Perform complex risk analyses which also include risk assessment., • Establish and satisfy information assurance and security requirements based upon the analysis of user, policy, regulatory, and resource demands., • Support customers at the highest levels in the development and implementation of doctrine and policies., • Apply know-how to government and commercial common user systems, as well as to dedicated special purpose systems requiring specialized security features and procedures., • Minimum of a Bachelor of Science (or higher) in one of the following: computer engineering, computer science, IT, cyber security, or a related field and 7 years of IT Cybersecurity experience including direct support of the US government and 4 years acting as an ISSO, Assessor, or Compliance Analyst. A minimum of at least one of the following certifications is required: • Certified Authorization Professional (CAP),, • Certified Information Security Manager (CISM),, • Certified Information Systems Security Professional (CISSP),, • Certified Chief Information Security Officer (CCISO) OR, • 8:00 am EST - 4:30 pm EST.

• Zermount, Inc

  

  SYSTEM SECURITY COMPLIANCE OFFICER

  19 days ago

  Arlington

  Job Description System Security ComPLIANCE OFFICER MILITARY FRIENDLY & PREFERRED - HOH SPONSOR SUMMARY: Zermount Inc. is seeking a System Security Compliance Officer who will perform complex risk analyses and ensure systems and technologies satisfy Information Assurance (IA) and Cybersecurity requirements, based on federal requirements, laws, mandates, policies, procedures, standards, and guidelines (e.g., EOs, OMB, BODs, NIST, and agency specific requirements). The System Security Compliance Officer will provide Plan of Actions and Milestones (POA&M) management, conduct FISMA Compliance meetings, and work with Information Systems Security Officers (ISSO), System Owners (SO), stakeholders, and leadership to meet performance and scorecard metrics. The Compliance Officer will conduct regular (e.g., daily, weekly, monthly) system security compliance meetings for assigned systems of responsibility, provide feedback and recommended mitigations to ensure systems meet the minimum requirements and security posture. Support customer at the highest levels to ensure the implementation of doctrine and policies. DUTIES & RESPONSIBILITIES: The System Security Compliance Officer will provide the following support and services: • Perform Compliance reviews and analyses to verify compliance with federal requirements (e.g., EO, OMB Memos, A-130, NIST SP 800-37, 800-53, FIPS199, and FIPS-200, etc.)., • Perform analyses of security implementations for assigned systems pertaining to people, processes, and technologies, identify gaps and recommend solutions., • Conduct daily, weekly, monthly compliance monitoring of assigned systems for all RMF steps., • Conduct compliance assessments of assigned systems, based on the Zermount approved Compliance Support Services Framework., • Execute day to day FISMA compliance monitoring, ensuring that all FISMA activities, including Information Security Continuous Monitoring (ISCM), Continuous Diagnostic and Mitigation (CDM), and FISMA program activities assigned are prioritized correctly, completed on schedule, and are in accordance with Agency and organizations policies., • Research major obstacles related to the ever-changing FISMA requirements, which customers will need to overcome and provide recommendations., • Track system ATO status, security documentation expirations (Contingency Plan, Contingency Plan Test, Configuration Management Plans, Incident Response Plans, etc.) Information Security Vulnerability Management (ISVM) compliance, DHS Performance Plan requirements, audit efforts, and CDM support efforts., • Conduct analysis of system level POA&Ms and provide guidance and recommendations on potential mitigation to close current or delayed POA&Ms., • Track and report on whether assigned systems have mitigated their weaknesses on time using the appropriate processes and reporting timelines., • Track and report on whether mandated FISMA activities are being executed in accordance with the current DHS Information Security Performance Plan (ISPP) for the fiscal year., • Provide compliance monitoring metrics and reporting to Agency leadership., • Review the DHS Scorecard, for each assigned system, conduct analysis, and generate "Get to Green" reports., • Conduct Get-to-green meetings with SOs and ISSOs, provide status, deficiencies, recommendations, and document action items with estimated completion dates (ECDs) with the goal of improving system scores within the DHS Scorecard., • Manage ISVM alerts and bulletins for TSA systems to include tracking, distributing, and providing reports., • Support systems of responsibility to ensure all ISCM and CDM requirements are met and mitigations for failing requirements are identified and discussed to ensure a plan is established to meet all requirements defined. Provide monthly reports with action items for stakeholders and leadership., • Create briefings and reports, as required for, but not limited to the following items: high valued assets, ISVMs, POA&Ms, system scores (FISMA & ISCM)., • Provide input into the GRC presentations for monthly ISSO Townhall training, as required by management or the Communications & Training Team Lead., • Provide updates and input to the GRC SharePoint sites to include document uploads, page updates, access requests, permissions, etc. on an ongoing basis., • Create or update existing templates for memos, risk assessments, disposal packages, to standardize and simplify the process., • Conduct system compliance assessment to identify progress on ATO conditions, develop extension packages as required annotating analysis of system data / progress., • Conduct POA&M management activities, to include processing, reviewing, verifying, and validating creation and closures., • Report on expiring and overdue POA&Ms and ensure compliance with all DHS POA&M metrics and requirements as outlined in agency policy and the DHS ISPP., • Review waiver and risk acceptance requests for compliance with the Agency's Policies and Procedures., • Provide Quality Reviews of security documentation to ensure accuracy and compliance throughout the RMF process., • Support systems of responsibility to ensure all Ongoing Authorization (OA), requirements are met and any deficiencies are identified and tracked. Monitor activities and ensure all deficiencies exceeding 30 days are identified as requiring a POA&M., • Assist with conducting review and analysis of Requests for Change (RFC) and providing recommendations to conduct risk assessment (as applicable) based on the change and/or Security Impact Assessment (SIA)., • Support Security Control Assessors (SCAs) as required for assigned systems., • Provide input and assist with all audits, data calls, and queries relating to assigned systems., • Stay current with the latest developments in cybersecurity, information assurance, GRC, and related cybersecurity trends., • Create or update existing templates such as memos, risk assessments, disposal packages, to standardize and simplify GRC processes., • Assist in completing customer's Management Control Objectives Program (MCOP) reporting requirements., • Provide Weekly status reporting to leadership, • Experience and expert knowledge on NIST guidelines, FISMA, Cybersecurity principles and methodologies, Executive Orders (EO's), Office of Management and Budget (OMB) Memorandums, Federal, DoD and CISA Technical Reference Architectures, Maturity Models, Risk Management Framework (RMF), Cybersecurity Framework (CSF), technical knowledge of IT systems, and cloud security (is preferred)., • Knowledge of and experience using relevant cybersecurity and analysis tools such as Archer, Nessus Security Center, Splunk, etc., • Experience with cloud-based environments and technologies is preferred., • Knowledge of cybersecurity threats, risks, and vulnerabilities and how to mitigate them., • Excellent communication skills (written and verbal), with the ability to explain complex concepts in a clear, concise manner., • Strong problem-solving skills, proactive, ability to adapt to changes in priorities, attention to detail and organization skills, and possesses good problem solving and decision- making skills., • Must be able to conduct system analysis and quality reviews to detect performance issues., • Well versed in developing compliance solutions to resolve weaknesses or challenges., • Ability to work independently and as part of a team., • An analytical mind with excellent problem-solving ability is required., • Apply an enterprise-wide set of disciplines for the planning, analysis, design and construction of information systems on an enterprise-wide basis or across a major sector of the enterprise., • Develop analytical and computational techniques and methodology for problem solutions., • Perform enterprise-wide strategic systems planning, business information planning, business and analysis., • Perform process and data modeling in support of the planning and analysis efforts using both manual and automated tools; such as Integrated Computer-Aided Software Engineering tools., • Apply reverse engineering and re-engineering disciplines to develop migration strategic and planning documents., • Provide technical guidance in software engineering techniques and automated support tools., • Minimum of a Bachelor of Science (or higher) in one of the following: computer engineering, computer science, IT, cyber security, or a related field and 5 years of IT cybersecurity experience including direct support for the US Government and 4 years acting as an ISSO, Assessor, or Compliance Analyst, • A minimum of at least one of the following certifications is required:, • Certified Authorization Professional (CAP),, • Certified Information Security Manager (CISM),, • Certified Information Systems Security Professional (CISSP),, • Certified Chief Information Security Officer (CCISO), OR, • 8:00 am EST - 4:30 pm EST.