Information System Security Officer – Cloud Data Platform

Jobtailor; Deutschland; Vor Ort; EUR 90.000 - 130.000; Vollzeit

Zusammenfassung

Jobtailor in Germany seeks an Information System Security Officer to lead cybersecurity for a cloud data platform, ensuring ATO and ongoing authorization, and to produce SSPs, POA&Ms, SARs, and monitoring artifacts.

You will implement Azure security, IAM with RBAC, encryption, vulnerability management, and coordinate with government and CISO teams; CISSP, CCSP, and Cloud+ certifications are required.

Qualifikationen

• Minimum 5 years of ISSO or cloud cybersecurity responsibilities in federal cloud environments.
• Experience with Microsoft Azure cloud environments.
• Strong knowledge of Cloud Security, Zero Trust Architecture, IAM, RBAC, Encryption technologies, DLP, Vulnerability Management, Incident Response.
• Experience supporting FedRAMP, FISMA, NIST 800-53, Continuous Monitoring, RMF.
• Experience developing and maintaining ATO packages.
• Strong understanding of cloud security architecture and secure system design.
• Excellent written communication with executive-level security documentation.
• Required Certifications: CISSP, CCSP, CompTIA Cloud+.

Aufgaben

• Serve as the designated ISSO and primary cybersecurity lead for the cloud data platform.
• Lead security activities supporting the system's Authority to Operate (ATO) and ongoing authorization.
• Develop, maintain, and update security documentation including SSPs, POA&Ms, Risk Assessments, SARs, and Continuous Monitoring artifacts.
• Support compliance with FedRAMP Moderate, FISMA, NIST SP 800-53, NIST SP 800-207 (Zero Trust), FTC security policies.
• Implement and maintain cloud security controls within Microsoft Azure.
• Design and manage IAM using Microsoft Entra ID and RBAC.
• Configure and validate encryption for data at rest and in transit.
• Support vulnerability management, remediation planning, and security assessments.
• Coordinate monthly continuous monitoring activities and security metrics reporting.
• Conduct annual risk assessments and security control reviews.
• Support privacy documentation including PTAs and PIAs.
• Work with Government Authorizing Official, System Owner, CISO, COR, and Continuous Assurance teams.
• Assist with incident response, forensic investigations, and security event analysis.
• Coordinate vulnerability scanning, penetration testing, and remediation activities.
• Participate in tabletop exercises, disaster recovery planning, and cyber resilience initiatives.
• Ensure cloud solutions comply with FedRAMP authorization boundaries and federal cybersecurity requirements.
• Provide technical guidance to cloud architects and engineering teams on secure cloud design and implementation.

Kenntnisse

Cloud Security

Zero Trust

IAM

RBAC

Encryption

DLP

Vulnerability Mgmt

Incident Response

FedRAMP/NIST

Executive Docs

Jobbeschreibung

Responsibilities

• Serve as the designated Information System Security Officer (ISSO) and primary cybersecurity lead for the cloud data platform.
• Lead all security activities supporting the system's Authority to Operate (ATO) and ongoing authorization.
• Develop, maintain, and update security documentation including: System Security Plans (SSPs), POA&Ms, Risk Assessments, Security Assessment Reports (SARs), Continuous Monitoring artifacts.
• Support compliance with: FedRAMP Moderate, FISMA, NIST SP 800-53, NIST SP 800-207 (Zero Trust), FTC security policies.
• Implement and maintain cloud security controls within Microsoft Azure.
• Design and manage identity and access management using Microsoft Entra ID and RBAC.
• Configure and validate encryption for data at rest and in transit.
• Support vulnerability management, remediation planning, and security assessments.
• Coordinate monthly continuous monitoring activities and security metrics reporting.
• Conduct annual risk assessments and security control reviews.
• Support privacy documentation including PTAs and PIAs.
• Work closely with the Government Authorizing Official, System Owner, CISO, COR, and Continuous Assurance teams.
• Assist with incident response, forensic investigations, and security event analysis.
• Coordinate vulnerability scanning, penetration testing, and remediation activities.
• Participate in tabletop exercises, disaster recovery planning, and cyber resilience initiatives.
• Ensure cloud solutions comply with FedRAMP authorization boundaries and federal cybersecurity requirements.
• Provide technical guidance to cloud architects and engineering teams on secure cloud design and implementation.

Requirements

• Minimum 5 years of experience performing ISSO or cloud cybersecurity responsibilities within federal cloud environments.
• Experience supporting Microsoft Azure cloud environments.
• Strong knowledge of: Cloud Security, Zero Trust Architecture, Identity and Access Management, RBAC, Encryption technologies, Data Loss Prevention (DLP), Vulnerability Management, Incident Response.
• Experience supporting: FedRAMP, FISMA, NIST 800-53, Continuous Monitoring, Risk Management Framework (RMF).
• Experience developing and maintaining ATO packages.
• Strong understanding of cloud security architecture and secure system design.
• Excellent written communication skills with experience producing executive-level security documentation.
• Required Certifications: Certified Information Systems Security Professional (CISSP), Certified Cloud Security Professional (CCSP), CompTIA Cloud+.