Information System Security Officer (ISSO)

Jobtailor; Montana; On-site; USD 85,000 - 110,000; Full time

Job summary

Jobtailor is seeking a cybersecurity professional in the United States (Montana) to lead risk management framework activities. The role involves performing security analysis, guiding RMF-based A&A processes, and supporting documentation such as MOUs and RSAs while maintaining system configuration and audit oversight.

Ideal candidates have 3+ years in cybersecurity, RMF experience, and familiarity with security tools. Certifications listed in the ad are a strong match.

Qualifications

• 3+ years of cybersecurity experience in IT or related field.
• 3+ years of experience with RMF and cybersecurity policies.
• 3+ years using security tools and applications to support RMF.

Responsibilities

• Perform security analysis of operational and development environments, threats, vulnerabilities and internal interfaces
• Lead and implement the Assessment and Authorization (A&A) processes under the RMF
• Facilitate development of Memorandums of Understanding (MOU), Interconnection Security Agreements (ISA), Risk Acknowledgement Letters (RAL) and support Continuous Monitoring (CONMON)
• Oversee configuration management of assigned systems and auditing systems

Skills

IAM 8140.03

Security+CE

CAP

CISSP

CASP

CISM

GSLC

Security analysis

RMF implementation

Threat assessment

Job description

Responsibilities

• Perform security analysis of operational and development environments, threats, vulnerabilities and internal interfaces
• Lead and implement the Assessment and Authorization (A&A) processes under the Risk Management Framework (RMF)
• Facilitate development of Memorandums of Understanding (MOU), Interconnection Security Agreements (ISA), Risk Acknowledgement Letters (RAL) and support Continuous Monitoring (CONMON)
• Oversee configuration management of assigned systems and auditing systems

Requirements

• IAM Level 1 DoD 8140.03 compliant certification (Security+ CE, CAP, CISSP, CASP, CISM, GSLC)
• 3+ years of combined experience and/or education in cybersecurity, IT, or a related field
• 3+ years of experience with the Risk Management Framework (RMF), cybersecurity policies, and RMF implementation
• 3+ years of experience utilizing security relevant tools, systems, and applications in support of RMF

Certifications

• IAM Level 1 DoD 8140.03
• Security+ CE
• CAP
• CISSP
• CASP
• CISM
• GSLC