Senior Information System Security Officer (ISSO)
$140,000–$150,000 year
On-siteWashington, District of Columbia, United States or Washington, United States
Job Summary
Develop and maintain Systems Security Plans, Risk Assessment Reports, and Incident Response Plans to support Federal government accreditation and Authority to Operate reviews. Conduct independent security scans of applications, networks, and databases using NIST 800-53A and OMB circulars, while managing emerging risks associated with assigned information systems. Coordinate with the Cybersecurity Unit to achieve compliance, validate physical security measures, and train staff on contingency procedures. Perform risk analyses to determine cost-effective safeguards and manage hardware and software inventories for complex IT infrastructure. Requires Top Secret clearance and 10 years of relevant ISSO experience. Located in Washington DC with a Top Secret clearance requirement.
Required Qualifications
- Bachelor's Degree or equivalent combination of formal education and experience
- Bachelor's Degree may be substituted for 8 additional years of relevant experience
- Minimum of 10 years of general experience
- 8 years of relevant functional experience as an ISSO or Security Analyst
- Familiarity with program security responsibilities to include, but not limited to the NIST RMF, audit log reviews, system monitoring, SPAA processes, FISMA requirements, vulnerability & compliance scanning, continuous monitoring activities, security testing and evaluation, and security policies
- Demonstrated an understanding of system administration in understanding permissions, event monitoring, and logging
- Thorough understanding and knowledge of FISMA and SA&A process
- Proficiency in writing technical analysis reports
- Strong written and oral communication skills
- Project management (ability to track detailed tasks and ensure timely delivery)
- Good business acumen
- Relationship management
- Ability to work quickly, efficiently and accurately in a dynamic and fluid environment
- Top Secret Clearance
Desired Qualifications
- Understanding of Cloud (Amazon Web Services (AWS) or Azure and FedRAMP is highly desired
- Understanding and experience with CSAM is a PLUS
- Knowledge of DISA STIGS, CIS Benchmarks
- Experience using or interpreting Nessus scans
- Strategy development
- Balancing security requirements with mission needs
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.