Federal ISSO: RMF, ATO & CSAM Expert

Federal Advisory Partners; Washington (District of Columbia); On-site; USD 110,000 - 160,000; Full time

Job summary

Tria Federal is seeking a motivated Information System Security Officer (ISSO) to join our team. The ISSO will research, develop, implement, test, and review an organization’s information security to protect information and prevent unauthorized access, with emphasis on infrastructure devices and on-site work 1–2 times weekly in Washington, DC.

The candidate should have DHS Public Trust eligibility, 3–5 years of cybersecurity experience, CSAM and NIST RMF experience, and Security+ certification.

Qualifications

• BS in Computer Science, Information Technology, or related field.
• Familiar with CISSP, Security+, CGRC (formerly CAP), CISM.

Responsibilities

• Conduct initial Security Assessment and obtain ATO.
• Maintain the Security Authorization or ATO of assigned system(s).
• Update Security Authorization documentation to maintain ATO/go-live dates.
• Select baseline security controls using CSAM GRC Tool and tailor controls.
• Document NIST 800-53 controls in the SSP.
• Perform annual risk self-assessments of all systems.
• Produce Security Authorization package for AO signature.
• Track deployment of software not in base image.
• Conduct security impact analyses of proposed changes.
• Generate and manage POA&Ms with milestones and implementation statements.

Skills

Security governance

Risk assessment

written communications

Education

BS in Computer Science/IT

Tools

CSAM GRC Tool

Job description

Tria Federal is seeking a motivated Information System Security Officer (ISSO) to join our team. The ISSO will research, develop, implement, test, and review an organization’s information security to protect information and prevent unauthorized access, with emphasis on infrastructure devices and on-site work 1–2 times weekly in Washington, DC.

The candidate should have DHS Public Trust eligibility, 3–5 years of cybersecurity experience, CSAM and NIST RMF experience, and Security+ certification.