Information Systems Security Officer

About the role

Bamboohr is seeking a dedicated Information Systems Security Officer to join our team in Ft. Meade, Maryland. This full-time position is integral to ensuring the security and integrity of our information systems. The ideal candidate will possess a strong background in information security practices and will be responsible for developing, implementing, and managing security protocols to protect sensitive data. This role offers an opportunity to work in a dynamic environment where your expertise will directly contribute to the safety and security of our operations.

Key facts

What you'll do

• Develop and implement comprehensive information security policies and procedures to safeguard sensitive data and systems.
• Conduct regular security assessments and audits to identify vulnerabilities and recommend corrective actions.
• Monitor network traffic and system logs for unusual activity, responding promptly to potential security incidents.
• Collaborate with IT teams to ensure that security measures are integrated into all aspects of system development and maintenance.
• Provide training and awareness programs for employees to promote a culture of security within the organization.
• Work closely with compliance teams to ensure adherence to relevant regulations and standards, such as NIST, ISO, and others.
• Manage security incidents and breaches, coordinating response efforts and documenting findings for future reference.
• Stay current with emerging security threats and trends, continuously updating security practices to mitigate risks.
• Create and maintain documentation related to security policies, procedures, and incident reports.
• Participate in security-related projects and initiatives, providing expertise and guidance to project teams.
• Liaise with external partners and vendors to ensure that their security practices align with Bamboohr's standards.
• Prepare and present reports on security metrics and incidents to senior management, providing insights and recommendations.

Requirements

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field.
• A minimum of 5 years of experience in information security or a related role.
• Strong understanding of security frameworks and standards, including NIST, ISO 27001, and others.
• Proven experience with security tools and technologies, such as firewalls, intrusion detection systems, and antivirus software.
• Familiarity with risk assessment methodologies and vulnerability management processes.
• Excellent analytical and problem-solving skills, with the ability to think critically under pressure.
• Strong communication skills, both written and verbal, with the ability to convey complex security concepts to non-technical stakeholders.
• Relevant security certifications, such as CISSP, CISM, or CEH, are highly desirable.
• Experience in incident response and management is a plus.
• Ability to work independently and as part of a team in a fast-paced environment.

Nice to have

• Experience with cloud security and securing cloud-based applications and services.
• Knowledge of scripting languages (e.g., Python, PowerShell) for automation of security tasks.
• Familiarity with security compliance requirements for federal contracts.
• Previous experience in a government or defense-related organization.
• Understanding of physical security measures and their integration with information security.

Skills & tools

The ideal candidate will be proficient in a variety of security tools and technologies, including but not limited to:

• Security Information and Event Management (SIEM) systems
• Intrusion Detection and Prevention Systems (IDPS)
• Endpoint protection solutions
• Network security protocols and technologies
• Vulnerability scanning tools
• Data loss prevention (DLP) solutions
• Encryption technologies

Practical notes

This position is based in Ft. Meade, Maryland, and may require occasional travel for training or conferences. Candidates must be eligible for security clearance, as the role involves working with sensitive government information. Bamboohr is committed to fostering a diverse and inclusive workplace and encourages applications from all qualified individuals. Interested candidates can apply through our online portal at [Bamboohr Careers](https://birchmeregroup.bamboohr.com/careers/90).

Join Bamboohr as an Information Systems Security Officer and play a crucial role in protecting our information assets while advancing your career in a supportive and innovative environment.