Talent.com
Information Assurance Systems Officer, Information Services
Information Assurance Systems Officer, Information ServicesRAND Corporation • Pittsburgh, PA, United States
Information Assurance Systems Officer, Information Services

Information Assurance Systems Officer, Information Services

RAND Corporation • Pittsburgh, PA, United States
[job_card.variable_days_ago]
[job_preview.job_type]
  • [job_card.full_time]
[job_card.job_description]

Job Type : Regular

Information Assurance Systems Officer, Information Services

The Information Assurance Systems Officer (IASO), Information Services (IS) supports cybersecurity and risk management initiatives across enterprise unclassified systems. The IASO plays a central role in protecting information assets, ensuring compliance with federal, state and local cybersecurity requirements (e.g., NIST 800-171, CMMC), and maintaining a strong security posture through effective use of Governance, Risk, and Compliance (GRC) tools. This includes conducting audits, analyzing sensitive data, and collaborating with various teams to implement and maintain security measures. The IASO identifies vulnerabilities, recommends improvements, and provides expert guidance on cybersecurity matters while staying informed about emerging threats and trends. This IASO role is responsible for CMMC practices (Cybersecurity Maturity Model Certification) as a member of the Information Services (IS) Information Security Cybersecurity Team.

Responsibilities

Cybersecurity System Security and Compliance across the enterprise unclassified systems :

  • Develop and maintain System Security Plans (SSPs) and supporting documentation aligned with NIST 800-171 and CMMC practices.
  • Conduct regular security control assessments, perform gap analyses, and update Plans of Action and Milestones (POA&Ms).
  • Coordinate security authorization and compliance activities across IT systems and applications.

Cybersecurity and Security Reviews & Continuous Improvement :

  • Perform ongoing security reviews of applications, infrastructure, and business processes to verify compliance and identify improvements.
  • Recommend remediation strategy, track remediation efforts, and collaborate closely with IT, DevOps, and business teams
  • Conduct comprehensive cybersecurity audits to ensure compliance with CMMC, DFARS 7012, NIST 800-171, and other relevant regulations.
  • Analyze and assess various data types, including Controlled Unclassified Information (CUI), Controlled Technical Information (CTI), Federal Contract Information (FCI), International Traffic in Arms Regulations (ITAR), and Export Administration Regulation (EAR99).
  • Collaborate with system and network administrators to ensure audit features are configured and enabled correctly.
  • Third-Party IT Security Oversight :

  • Conduct third-party / vendor security assessments as part of the procurement and onboarding process.
  • Review supplier security documentation and manage risks associated with external data sharing and service providers.
  • Incident Support :

  • Participate in incident response activities, including documentation, coordination, and lessons learned reviews.
  • Help improve incident detection, containment, and prevention through policy, training, and technical improvements.
  • GRC & Risk Management Support :

  • Utilize GRC tools to document and track risk assessments, policy compliance, and mitigation efforts.
  • Identify and evaluate risks to information assets; assist in the development of risk treatment and remediation plans.
  • Review policy exceptions to assess impact and risk, track approvals, and monitor mitigation within target remediation timeline
  • Collaborate with internal stakeholders to ensure alignment of technical and administrative controls with risk management strategies.
  • IT Security Awareness & Training :

  • Support the development and rollout of security awareness training to ensure users understand responsibilities and best practices.
  • Ensure training completion and maintain accurate compliance records; other duties as assigned.
  • Qualifications

    Required :

  • Minimum 8 years of experience with a BS / BA degree in an IT information security or compliance role in a corporate or government contractor setting. (Minimum 12 years' experience without a BA / BS degree.)
  • Strong understanding of NIST SP 800-171, CMMC Level 2, and basic DFARS cybersecurity clauses.
  • Extensive knowledge of multiple federal government network security processes and procedures
  • Technical background with understanding or hands-on experience in Information Technology environments and web technologies
  • Excellent oral and written communications skills required for correspondence, reports, briefings, and procedures
  • U.S. Citizenship (required for defense contractor compliance).
  • Must have the ability to obtain and maintain a security clearance
  • Cybersecurity Risk Management or Information Assurance related certifications.
  • Proficient in MS Office Applications.
  • Excellent written / verbal communication skills and judgement.
  • Preferred :

  • Professional certifications such as Security+, CISSP, CISA, or CRISC.
  • Familiarity with audit processes, internal controls, and security risk assessments.
  • Knowledge of Microsoft office applications
  • Working knowledge of Confluence and Jira for task management
  • Experience

    With a BS / BA degree, at least 8 years' experience in cybersecurity required. Without a BS / BA degree, at least 12 years' experience in cybersecurity security required.

    Education

    High school diploma or GED is required. BS / BA degree is preferred.

    Security Clearance

    Must meet eligibility requirements for access to U.S.government classified information.

    Location

  • Santa Monica, CAor
  • Washington D.C., or Pittsburgh. PA
  • This position is mainly onsite at a RAND U.S. location.

    Positions Open

    One

    Salary Range : $120,900 - $180,300

    RAND considers a variety of factors when formulating an offer, including but not limited to, the specific role and associated responsibilities; a candidate's work experience, education / training, skills, expertise; and internal equity.The salary range includes base pay plus RAND's sabbatic pay (which provides additional compensation above base pay when vacation is taken). In addition, RAND provides strong benefits including health insurance coverage, life and disability insurance, savings plan, paid time-off and more.

    Equal Opportunity Employer

    [job_alerts.create_a_job]

    Information Officer • Pittsburgh, PA, United States

    [internal_linking.related_jobs]
    Manager of Business Systems Analysis

    Manager of Business Systems Analysis

    First National Bank of Pennsylvania • Pittsburgh, PA, United States
    [job_card.full_time]
    Make a difference - for us and for your future.Please note : this on-site position is based at our Financial Center in Pittsburgh, PA. Candidates must be local, or willing to relocate to area.FNB wil...[show_more]
    [last_updated.last_updated_30] • [promoted]
    Senior IT Auditor

    Senior IT Auditor

    Northwest Bank • Bellevue, PA, United States
    [job_card.full_time]
    The Senior IT Auditor performs specialized auditing tasks related to the bank's IT function.This includes thorough and efficient planning, testing, reporting, and follow up on audit results.The rol...[show_more]
    [last_updated.last_updated_variable_days] • [promoted]
    Adjunct Health Information Technology

    Adjunct Health Information Technology

    InsideHigherEd • Allegheny, Pennsylvania, United States
    [job_card.part_time]
    Adjunct Health Information Technology.Please note : If you are a PSERS retiree, per PSERS guidelines, employment by the College as an adjunct faculty member will result in the suspension of your ret...[show_more]
    [last_updated.last_updated_30] • [promoted]
    Adjunct Computer Information Technologies

    Adjunct Computer Information Technologies

    InsideHigherEd • Allegheny, Pennsylvania, United States
    [job_card.part_time]
    Adjunct Computer Information Technologies.Please note : If you are a PSERS retiree, per PSERS guidelines, employment by the College as an adjunct faculty member will result in the suspension of your...[show_more]
    [last_updated.last_updated_30] • [promoted]
    Bus Systems Analyst

    Bus Systems Analyst

    V2Soft • Pittsburgh, PA, US
    [job_card.full_time]
    V2Soft is a global leader in IT services and business solutions, delivering innovative and cost-effective technology solutions worldwide since 1998. We have headquarteerd in Bloomfiled Hills, MI and...[show_more]
    [last_updated.last_updated_variable_days] • [promoted]
    Customs and Border Protection Officer

    Customs and Border Protection Officer

    U.S. Customs and Border Protection • Bentleyville, Pennsylvania, US
    [job_card.full_time] +1
    Customs and Border Protection Officer (CBPO).A high number of candidates may make applications for this position, so make sure to send your CV and application through as soon as possible.Customs an...[show_more]
    [last_updated.last_updated_30] • [promoted]
    Information Security Specialist II

    Information Security Specialist II

    Federal Home Loan Bank Pittsburgh • Pittsburgh, PA, United States
    [job_card.full_time]
    The Information Security Specialist plays a vital role in protecting the Bank's information assets by ensuring the integrity, confidentiality, and availability of systems across the enterprise.This...[show_more]
    [last_updated.last_updated_variable_days] • [promoted]
    Senior Systems Analyst

    Senior Systems Analyst

    Federal Home Loan Bank Pittsburgh • Pittsburgh, PA, United States
    [job_card.full_time]
    The Senior Systems Analyst will be a lead technical resource and work independently to understand and document business requirements, design technical solutions, and implement applications.The cand...[show_more]
    [last_updated.last_updated_30] • [promoted]
    Information Technology Professional (IT Support)

    Information Technology Professional (IT Support)

    US Navy • Pittsburgh, Pennsylvania, United States
    [job_card.part_time]
    At any given moment, hundreds of complex networked computer systems are operating in tandem to keep ships and submarines operating at their best. When a network goes down, vital information may be l...[show_more]
    [last_updated.last_updated_variable_days] • [promoted]
    Director of Disability Resources & Services (Reg FT)

    Director of Disability Resources & Services (Reg FT)

    InsideHigherEd • Pittsburgh, Pennsylvania, United States
    [job_card.full_time]
    Director of Disability Resources & Services (Reg FT).Director of Disability Resources & Services (Reg FT).This position will remain open until filled. However, in order to ensure consideration for a...[show_more]
    [last_updated.last_updated_30] • [promoted]
    Director of Health Services

    Director of Health Services

    Jobot • Pittsburgh, PA, US
    [job_card.full_time]
    Join Our Multifaceted Team as our Director of Health Services!.This Jobot Job is hosted by : Parker Huguley.Are you a fit? Easy Apply now by clicking the "Apply Now" button and sending us your resum...[show_more]
    [last_updated.last_updated_variable_days] • [promoted]
    Manager of IT Risk

    Manager of IT Risk

    First National Bank of Pennsylvania • Pittsburgh, PA, United States
    [job_card.full_time]
    Make a difference - for us and for your future.Please note : this on-site position is based at our Financial Center in Pittsburgh, PA. Candidates must be local, or willing to relocate to the area.FNB...[show_more]
    [last_updated.last_updated_variable_days] • [promoted]
    Access & Reimbursement Manager

    Access & Reimbursement Manager

    Syneos Health / inVentiv Health Commercial LLC • Pittsburgh, PA, United States
    [job_card.full_time]
    The Access & Reimbursement Manager (ARM) will operate as the subject-matter expert on reimbursement, access, and coverage issues affecting the client's products. The ARM role is a remote / field-based...[show_more]
    [last_updated.last_updated_30] • [promoted]
    IT Director of Digital Channels and Payments

    IT Director of Digital Channels and Payments

    First National Bank of Pennsylvania • Pittsburgh, PA, United States
    [job_card.full_time]
    Make a difference - for us and for your future.Please note : This on-site position is based at the FNB Financial Center in Pittsburgh, PA. Candidates must be local or willing to relocate to Western P...[show_more]
    [last_updated.last_updated_30] • [promoted]
    Adjunct Political Science

    Adjunct Political Science

    InsideHigherEd • Allegheny, Pennsylvania, United States
    [job_card.part_time]
    Please note : If you are a PSERS retiree, per PSERS guidelines, employment by the College as an adjunct faculty member will result in the suspension of your retirement benefits by PSERS.Applicants m...[show_more]
    [last_updated.last_updated_30] • [promoted]
    Application Systems Senior Analyst

    Application Systems Senior Analyst

    Northwest Bank • Bellevue, PA, United States
    [job_card.full_time]
    Senior Application Systems Analyst provides analytical, tier 2 / 3 technical support for business applications, mentors and coaches junior team members. creates and maintains documentation relative t...[show_more]
    [last_updated.last_updated_30] • [promoted]
    Director of Enterprise Technology Program Management

    Director of Enterprise Technology Program Management

    Northwest Bank • Bellevue, PA, United States
    [job_card.full_time]
    The Director of Enterprise Technology Program Management role will lead and oversee the Northwest Bank's technology transformation initiatives, with the CRM implementation as a key program under it...[show_more]
    [last_updated.last_updated_30] • [promoted]
    IT Asset Management Lead

    IT Asset Management Lead

    CData Software • Pittsburgh, PA, United States
    [job_card.full_time]
    IT Asset Management Practice Lead.IT asset lifecycle, ensuring efficiency, cost-effectiveness, and compliance.This is a hands-on leadership role that requires a deep understanding of ITAM principle...[show_more]
    [last_updated.last_updated_1_day] • [promoted]