Information System Security Officer (ISSO)

MUST BE US CITIZEN WITH ACTIVE SECRET CLEARANCE OR HIGHER*NO VENDOR ASSISTANCE AT THIS TIME*

Is this the next step in your career Find out if you are the right candidate by reading through the complete overview below.
Information System Security Officer (ISSO)Onsite in Arlington, VAClearance: Secret (or higher)
We are seeking an Information System Security Officer (ISSO) to support the GSS 2.0 program. You will safeguard information systems assets and maintain security compliance across the organization, working with both IT teams and management. The successful candidate brings a strong foundation in Assessment and Authorization (A&A) activities and a solid working knowledge of the Risk Management Framework (RMF) and NIST cybersecurity publications.
ResponsibilitiesDevelop and coordinate all authorization documentation, including the System Categorization, System Security Plan (SSP), and System Risk AssessmentSupport the control assessment, reporting, and continuous monitoring processesCoordinate with the DoS liaison to provide POA&M statusSupport and document Security Control Assessments, assist in remediation, and ensure POA&Ms are appropriately managedUpdate the Business Continuity and Contingency Plan for the componentConduct vulnerability scanning of IT systems and provide reports and metricsAssist components with decisions that affect the security of their systems and networksAssess information systems security requirements, evaluate current security posture, and recommend priorities for remediationReview information system infrastructure and application architecture to assess security requirementsReview existing SA&A documentation, Security Assessment Reports, and security infrastructure (e.g., IDS, firewalls, vulnerability scan tools)Assess NIST SP 800-53 Rev 4/Rev 5 controls and document resultsEvaluate and strengthen SA&A documentation and work with the customer to maintain the system ATOPerform and document risk assessments, analyzing security vulnerabilities and the metrics used to measure associated riskConduct annual NIST-based self-assessments, identify weaknesses, and develop a POA&M for each based on industry best practicesMonitor and analyze Intrusion Detection Systems (IDS) to identify security issues for remediationRecognize potential, successful, and unsuccessful intrusion attempts and compromises through thorough review and analysis of event detail and summary informationEvaluate technology change requests and assess organizational riskAssist with implementation of countermeasures or mitigating controlsResearch, evaluate, test, and implement new security software or devicesConduct investigations of information systems security violations and incidents, reporting to management as necessaryImplement, enforce, communicate, and develop security policies or plans for data, software applications, hardware, telecommunications, and information systems security education/awareness programsPerform periodic and on-demand system audits and vulnerability assessments, including user accounts, application access, file system, and external web integrity scans to determine complianceProvide information to management regarding the negative impact on the business caused by theft, destruction, alteration, or denial of access to information xzbcwsv Ensure compliance with regulations and privacy lawsDevelop materials for computer security education/awareness programsRespond to queries and requests for computer security information and reportsMay serve as a team or task lead
RequirementsBachelor’s degree (BA/BS) or equivalentMust be a U.S. CitizenMust possess Secret security clearance (or higher)Minimum 5 years of IT Security experienceStrong working knowledge of NIST Special Publications, including NIST SP 800-37 and 800-53Experience with AWS (preferred)Clear written and oral communication skillsAbility to troubleshoot and solve complex technical problems
Required CertificationsCurrent certification in one or more of the following:ISACA – Certified Information Systems Auditor (CISA)ISACA – Certified Information Security Manager (CISM)(ISC)² – Certified Information Systems Security Professional (CISSP)(ISC)² – Certified Authorization Professional (CAP)