Information Systems Security Officer

We are looking for a very skilled Information Systems Security Officer (ISSO) to make sure that the security of our information systems is always up to par. The ISSO will be in charge of putting in place managing and enforcing information security policies procedures and controls to make sure that the company meets all federal industry and organizational security standards.

Only people who live in the United States and are legally allowed to work there can apply for this job. We will not look at applications from people who live outside the United States.

Main Duties:

Follow company rules and government rules when setting up keeping an eye on and keeping information system security controls in place.

Make sure that systems meet the security standards and frameworks that apply to them (for example NIST SP 800-53 RMF FISMA and ISO 27001).

Support system authorization (ATO) processes which include security documentation assessments and ongoing monitoring activities

Do security risk assessments vulnerability assessments and keep track of fixes.

Keep an eye on security events incidents and audit results; plan how to respond to incidents and fix problems.

Review and approve changes to the system to make sure they dont affect security or break the rules.

Work with system owners administrators and auditors to make sure that security needs are met.

Keep security documents like risk assessments System Security Plans (SSPs) and POA&Ms up to date.

Help technical and non-technical stakeholders learn about security and give them support.

Qualifications Needed:

A bachelors degree in computer science information technology cybersecurity or a related field (or the same amount of work experience)

At least five years of experience in cybersecurity information systems security or risk management

A lot of knowledge about security controls risk management and information assurance principles

Experience using the NIST Risk Management Framework (RMF) and meeting federal compliance requirements

Knowledge of operating systems networks and cloud-based settings

Great skills in analysis writing and talking to people

Desired Qualifications

CISSP CISM CEH Security or CAP are examples of professional security certifications.

Experience working in government defense or regulated business settings

Active or eligible U.S. security clearance (if needed)

Pay:

Annual Salary Range: $110000 to $145000 USD depending on experience certifications and where you live.

Benefits:

Full coverage for medical dental and vision care

401(k) retirement plan with matching funds from the employer

Paid time off sick leave and holidays that are either federal or company-wide

Insurance for life short- and long-term disabilities

Reimbursement for training professional development and certification

Programs for employee health and wellness and services for employees in need

Flexible work hours (if possible)