Information System Security Officer Lead

2 weeks ago


Washington, United States SAIC Full time

Job ID: 2406794

**Location**:WASHINGTON, DC, US

**Date Posted**:2024-05-14

**Category**:Cyber

**Subcategory**:Cybersecurity Ops

**Schedule**:Full-time

**Shift**:Day Job

**Travel**:No

**Minimum Clearance Required**:None

**Clearance Level Must Be Able to Obtain**:Public Trust

**Potential for Remote Work**:No

**Description**

SAIC is looking for an experienced Information System Security and Privacy Officer (ISSPO) to join our team supporting an important US government agency in the National Capital Region. This is an exciting opportunity to work with a team responsible for IT Security Governance, Risk and Compliance by providing direct support to Agencies Information System Security and Privacy Officer (ISSPO) in managing and documenting the ongoing security posture of the agency. The ISSPO will support the Program Manager and work collaboratively with other Information Systems Security Analysts, IT SMEs and System Administrators to conduct analysis, mitigation, remediation, and monitoring to ensure compliance with agency policies and procedures. The ISSPO will lead, and guide efforts associated with obtaining and maintaining RMF Authorities to Operate (ATO) for systems within the customer’s multi-faceted network infrastructure, spanning multiple platforms residing on multiple security enclaves. Specifically, this job will consist of the following:

- Provide Risk Management Framework (RMF) and Authorization and Accreditation (A&A) activities such as developing and maintaining systems Authority to Operate (ATO) package documentation.
- Establish procedures & processes to ensure tracking and mitigation of risks identified during the ATO process.
- Provide data categorization guidance to system owners
- Develop and update Interconnection Security Agreement documentation as needed.
- Support customer responses to ongoing information system audits.
- Develop and update System Security Plans (SSPs) and supporting documentation.
- Assisting with tailoring of security control baselines for general support system and other FISMA reportable systems, including cloud systems utilizing FedRamp controls
- Oversee development of security and privacy control implementation statements per NIST SP 800-53 and agency security policy standards.
- Assist with the migration to NIST SP 800-53 Rev 5, identifying gaps and providing understanding of new requirements to technical teams for implementation
- Review and assess POA&M outputs, recommending additional work or closure.
- Support the continuous monitoring program as necessary when Information System Continuous Monitoring (ISCM) results will be used to support continuing authorization requirements or ongoing authorizations.
- Document and communicate control deficiencies for POA&M consideration.
- Assist in developing security policies, ensuring compliance, and updating documentation.
- Provide information for status reports, briefings, schedules, and project plans in written and oral form.

**This role requires on site work in Washington, D.C. 2 days per week.**

**Qualifications**

**EDUCATION & EXPERIENCE**:

- Undergraduate degree with eleven years of experience or Graduate degree with nine years of experience in IT Infrastructure, IT Security, and/or Governance, Risk and Compliance (GRC).
- One or more current Security certifications (CISSP, CISM, Security+).

**REQUIRED SKILLS**:

- Expert knowledge of RMF accreditation packages and all steps of the RMF process.
- Experience in Security, Privacy Assessment and Authorization (SPA&A) activities and ATO package creation.
- Experience working with RMF and NIST SP 800-53 (Rev 4/5)
- Knowledge of cyber-attack patterns, tactics, techniques, and procedures.
- Ability to adapt security processes/tools to evolving landscapes and risk scenarios.
- Familiarity with IT Audits using FISCAM processes and procedures.
- Experience with NIST Risk Management and Cybersecurity Framework, FISMA, NIST SP 800-53, and IT control processes.
- Experience with GRC frameworks/tools (RSAM, CSAM) and SA&A tools (Xacta).
- Very strong technical understanding of Windows and Linux platforms
- Experience taking IT and network system(s) through the ATO process
- Ability to tailor information security processes and tools, based on ever evolving and changing landscapes, doctrine, and risk scenarios.
- Comprehensive knowledge performing and identifying impacts as well as consideration of existing risk mitigation strategies.
- Experience with auditing control implementations and communicating risks associated with control deficiencies or gaps.
- Experience with SharePoint lists and workflows, and general project management tools
- Ability to work effectively independently as well as within a team environment.
- Fluency in both spoken and written English, including the ability to work with highly technical and specialized content. Must be able both prepare and deliver such content, verbally and in writing, but also comprehend such content from othe



  • Washington, United States Information Protection Solutions Full time

    Job Description Job Description Information systems security officers (ISSO) research, develop, implement, test and review an organization's information security in order to protect information and prevent unauthorized access. Officers inform users about security measures, explain potential threats, install software, implement security measures and monitor...


  • Washington, United States Information Protection Solutions Full time

    Job DescriptionJob DescriptionInformation systems security officers (ISSO) research, develop, implement, test and review an organization's information security in order to protect information and prevent unauthorized access. Officers inform users about security measures, explain potential threats, install software, implement security measures and monitor...


  • Washington, United States Watershed Security Full time

    COMPANY OVERVIEW Watershed Security is a Veteran Owned Small Business and a leader in providing quality Cyber Security Services to the Federal Government. Watershed is a great place to work, offering a challenging and respectful work environment. We are growing fast and strive to deliver our vision every day: “To inspire trust and respect with our...


  • Washington, United States Watershed Security Full time

    Job DescriptionJob DescriptionCOMPANY OVERVIEWWatershed Security is a Veteran Owned Small Business and a leader in providing quality Cyber Security Services to the Federal Government. Watershed is a great place to work, offering a challenging and respectful work environment. We are growing fast and strive to deliver our vision every day: “To inspire trust...


  • Washington DC, United States Watershed Security Full time

    COMPANY OVERVIEW Watershed Security is a Veteran Owned Small Business and a leader in providing quality Cyber Security Services to the Federal Government. Watershed is a great place to work, offering a challenging and respectful work environment. We are growing fast and strive to deliver our vision every day: “To inspire trust and respect with our...


  • Washington, United States Booz Allen Full time

    / / Washington / District of Columbia / USA **Information System Security Officer** Washington , District of Columbia , USA **Job Description** **Location:** Washington, District of Columbia, USA **Remote Work:** No **Job Number:** R0121014 Share job via: Share this job: Information System Security Officer**The Challenge**: When our countrys cybersecurity is...


  • Washington, United States Booz Allen Full time

    / / Washington / District of Columbia / USA **Information System Security Officer** Washington , District of Columbia , USA **Job Description** **Location:** Washington, District of Columbia, USA **Remote Work:** No **Job Number:** R0121014 Share job via: Share this job: Information System Security Officer**The Challenge**: When our countrys cybersecurity...


  • Washington, United States Omniscius Consulting Full time

    Job Description Job Description We are seeking a highly experienced Senior Information System Security Officer (ISSO) to lead our information security Compliance Branch to support a homeland security customer in Washington, DC. The ideal candidate will have over 10 years of experience in managing complex systems within our Agency, demonstrating a deep...


  • Washington, United States Demand Drive Solutions LLC Full time

    Job Title: Information Systems Security Officer (ISSO) Location: Washington, DC Salary : - $110,000 $120,000 / yr Roles and Responsibilities: Services to support IS Security performed by the Senior Cloud Information System Security Officer (ISSO), at a minimum, shall consist of the following activities: Ensure the day-to-day implementation, oversight,...


  • Washington, United States Omniscius Consulting Full time

    We are seeking a highly experienced Senior Information System Security Officer (ISSO) to lead our information security Compliance Branch to support a homeland security customer in Washington, DC. The ideal candidate will have over 10 years of experience in managing complex systems within our Agency, demonstrating a deep understanding of the cybersecurity...


  • Washington, United States Omniscius Consulting Full time

    Job DescriptionJob DescriptionWe are seeking a highly experienced Senior Information System Security Officer (ISSO) to lead our information security Compliance Branch to support a homeland security customer in Washington, DC. The ideal candidate will have over 10 years of experience in managing complex systems within our Agency, demonstrating a deep...


  • Washington, United States TCecure LLC Full time

    Serve as an Information System Security Officer (ISSO) in support of the Authorization of information systems and all related cybersecurity policies and procedures. Lead overall authorization process, to include supporting cybersecurity policy, procedures, and processes. Manage the creation of ATO Packages for systems and enclaves. Manage all Security...


  • Washington, United States Information Protection Solutions Full time

    Job DescriptionJob DescriptionRESPONSIBILITYAnalyze science, engineering, business, and other data processing problems to implement and improve computer systems. Analyze user requirements, procedures, and problems to automate or improve existing systems and review computer system capabilities, workflow, and scheduling limitations. May analyze or recommend...


  • Washington, United States Bering Straits Native Corporation (BSNC) Full time

    Overview: Visit our website at www.beringstraits.com to apply! Job specifications are intended to present a descriptive list of the range of duties performed by employees. Specifications are not intended to reflect all duties performed within the job. SUMMARY Bering Global Solutions, LLC, a subsidiary of Bering Straits Native Corporation is currently...


  • Washington, United States Bering Straits Native Corporation Full time

    Overview Visit our website at www.beringstraits.com to apply! Job specifications are intended to present a descriptive list of the range of duties performed by employees.  Specifications are not intended to reflect all duties performed within the job. SUMMARY Bering Global Solutions, LLC, a subsidiary of Bering Straits Native Corporation is currently...


  • Washington, United States DANASTAR Professional Services, LLC Full time

    DANASTAR is currently seeking talented, experienced Information System Security Officers (ISSO) for an exciting position supporting one of our premier clients. Our project is aimed at establishing cutting-edge techniques for network defense, identifying threats and detecting malicious activity using advanced toolsets. The ideal candidate will have hands-on...


  • Washington, United States DANASTAR Professional Services, LLC Full time

    DANASTAR is currently seeking talented, experienced Information System Security Officers (ISSO) for an exciting position supporting one of our premier clients. Our project is aimed at establishing cutting-edge techniques for network defense, identifying threats and detecting malicious activity using advanced toolsets. Is this the next step in your career...


  • Washington, United States TekSynap Full time

    Responsibilities & Qualifications RESPONSIBILITIES The Information Systems Security Officer is expected to be able to : Support Engineering and Operations network solutions and strategic adherence to all aspects of the Information Assurance (IA) program as stipulated by various U.S. Government requirements including (but not limited to): Director of Central...


  • Washington, United States Secret Full time

    ** Information Systems Security Officer** **Department of Homeland Security** **Location** 1 vacancy in the following location: + **Duties** The selectee will serve as an Information Security Specialist in the Office of Professional Responsibility. Typical work assignments include: * Overseeing and providing direction on insider threat program operational...


  • Washington, United States Customer Value Partners, Inc Full time

    Overview: CVP is an award-winning healthcare and next-gen technology consulting firm recognized for excellence and innovation in the solutions we have provided our clients across healthcare, national security, and the public sector. We are seeking an Information System Security Officer to join our team of experts tasked with securing the critical networks...