logo

View all jobs

Senior Information Security Officer (ISSO) - Top Secret Clearance

Washington, DC
Senior Information System Security Officer (ISSO) – Washington DC
Top Secret Clearance Required
Description: 
  • Lead the RMF process for assigned programs, organizations, systems, or enclaves.
  • Maintain and report system’s A&A status and events.
  • Manage the SP for assigned systems throughout their lifecycle.
  • Perform annual security reviews, annual testing of security controls, and annual testing of the contingency plan, in line with FISMA requirements.
  • Manage POA&M entries and ensuring vulnerabilities are properly tracked, mitigated, and resolved.
  • Assist with identification of the security control baseline set and any applicable overlays.
  • Supervise the validation of security controls with the PM/ISO, SCA Liaison, PSO, and AO CSA.
  • Assemble the Security Authorization Package and submit for adjudication.
  • Register and maintain the system in eMASS.
  • Assess the quality of security control implementation against all requirements in accordance with the approved SLCM strategy.
  • Plan and perform cybersecurity testing to assess security controls and recording security control compliance status during sustainment.
  • Report changes in the security posture of systems to the AO.
  • Utilize the Collaboration Board in eMASS workflow for all formal coordination during the RMF process. Detailed findings will be posted in the Artifacts tab (if necessary).
  • Ensure compliance with all USN, DON, and DoD cybersecurity policies.
  • Ensure all users possess the requisite security clearances and awareness of their responsibilities for systems under their purview prior to being granted access.
  • Ensure an incident response, business continuity, disaster recovery, as well as vulnerability and threat reporting plans and channels are in place and that team members are trained accordingly.
  • Ensure relevant policy and procedural documentation is current and accessible to properly authorized individuals.
  • Utilize the Collaboration Board in the eMASS workflow for all formal coordination during the RMF process. Detailed findings will be posted in the Artifacts tab (if necessary).
  • Assist the ISSE and ISSM with various activities
Requirements:
  • 15+ years of technical and managerial experience in system administration and information security/cybersecurity.
  • CISSP, CISM, or other DOD 8570.01-M IAM Level 3 certification.
  • Bachelor’s degree with a concentration in a related discipline (e.g., information security, cybersecurity, information technology)
  • Must be familiar with DOD Risk Management Framework (RMF) policies, standards, procedures and have relevant experience with associated tools (e.g., eMASS, XACTA 360, Assured Compliance Assessment Solution (ACAS), Anchore, DISA Security Technical Implementation Guides (STIGs), SCAP Compliance Checker (SCC), STIG Viewer, eMASSter, Eval STIG).


EDUCATION:
  • Bachelor’s degree with a concentration in a related discipline (e.g., information security, cybersecurity, information technology)
  • CISSP, CISM, or other DOD 8570.01-M IAM Level 3 certification.

Share This Job

Powered by