Information Systems Security Officer

About the role

Bamboohr is seeking a dedicated Information Systems Security Officer to join our team in Ft. Meade, Maryland. This full-time position is crucial for safeguarding our information systems and ensuring compliance with security policies and regulations. The ideal candidate will possess a strong understanding of cybersecurity principles and practices, along with the ability to implement effective security measures to protect sensitive data. As part of our dynamic team, you will play a vital role in maintaining the integrity and confidentiality of our information systems.

Key facts

What you'll do

• Develop and implement comprehensive information security policies and procedures to protect sensitive data and systems from unauthorized access and cyber threats.
• Conduct regular risk assessments and vulnerability analyses to identify potential security weaknesses and recommend appropriate mitigation strategies.
• Monitor network traffic and system logs to detect and respond to security incidents in a timely manner, ensuring minimal disruption to operations.
• Collaborate with IT teams to design and implement security solutions that align with organizational goals and compliance requirements.
• Provide training and awareness programs for employees to promote a culture of security and ensure adherence to security protocols.
• Stay up-to-date with the latest cybersecurity trends, threats, and technologies to continuously improve the organization's security posture.
• Prepare and maintain documentation related to security policies, incident response plans, and compliance audits.
• Serve as the primary point of contact for security-related inquiries and incidents, working closely with stakeholders to address concerns and implement solutions.
• Assist in the development of disaster recovery and business continuity plans to ensure the organization can recover from security incidents effectively.
• Participate in security audits and assessments conducted by external parties, providing necessary documentation and support as required.
• Evaluate and recommend security tools and technologies to enhance the organization's security infrastructure.
• Collaborate with cross-functional teams to ensure that security considerations are integrated into all aspects of system development and deployment.

Requirements

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field.
• A minimum of 5 years of experience in information security or a related role, with a proven track record of managing security incidents and vulnerabilities.
• Strong knowledge of security frameworks and standards such as NIST, ISO 27001, and CIS Controls.
• Experience with security tools and technologies, including firewalls, intrusion detection/prevention systems, and endpoint protection solutions.
• Familiarity with regulatory requirements such as FISMA, HIPAA, or PCI-DSS, and experience ensuring compliance with these standards.
• Excellent analytical and problem-solving skills, with the ability to think critically and make informed decisions under pressure.

Nice to have

• Relevant certifications such as CISSP, CISM, or CEH are highly desirable.
• Experience in cloud security and securing cloud-based applications and services.
• Knowledge of secure software development practices and application security testing methodologies.

Skills & tools

The ideal candidate will be proficient in various security tools and technologies, including but not limited to:

• Security Information and Event Management (SIEM) systems
• Network security appliances (firewalls, IDS/IPS)
• Endpoint protection solutions
• Vulnerability assessment and penetration testing tools
• Encryption technologies and secure communication protocols

Practical notes

This position is based in Ft. Meade, Maryland, and may require occasional travel for training or conferences. The successful candidate will be expected to work collaboratively within a team environment while also demonstrating the ability to work independently on security initiatives. Bamboohr offers a competitive salary and benefits package, along with opportunities for professional development and growth within the organization.

If you are passionate about cybersecurity and are looking to make a significant impact in a challenging and rewarding role, we encourage you to apply for the Information Systems Security Officer position at Bamboohr. Join us in our mission to protect critical information and ensure the security of our systems.