Information System Security Officer (ISSO)

ISPA Technology, LLC; Philadelphia (Philadelphia County); On-site; USD 70,000 - 110,000; Full time

Job summary

Join a forward-thinking company as an Information System Security Officer, where your expertise will help safeguard vital information systems. This role offers you the chance to engage in meaningful work, ensuring compliance with security standards and managing vulnerabilities effectively. With a commitment to your professional growth, ISPA Technology provides a vibrant culture that values your contributions and offers competitive compensation along with comprehensive benefits. If you're looking to make a significant impact in a dynamic environment, this opportunity is perfect for you.

Benefits

Competitive salary packages

Comprehensive health coverage

Generous PTO allotment

401(K) with company match

Opportunities for professional development

Qualifications

• 6+ years of experience in information security and risk management.
• Must have IAM II Certification and DoD SECRET Security Clearance.

Responsibilities

• Maintain and report security status to program managers and system owners.
• Manage vulnerabilities and ensure proper remediation actions are taken.

Skills

Information System Security

Risk Management Framework (RMF)

Vulnerability Management

Security Control Testing

Education

Bachelor’s degree in Computer Science

STEM degree

Tools

Enterprise Mission Assurance Support Service (eMASS)

Vulnerability Remediation Asset Manager (VRAM)

Job description

Information System Security Officer (ISSO)

Philadelphia, PA

Step into the heart of innovation at ISPA Technology, a beacon in the technology services sector. Our distinguished presence on the Inc. 5000 list of Fastest Growing Companies for five consecutive years isn't just a testament to our growth but a reflection of the vibrant community we've built. Here, you're not just taking a job; you're being welcomed into a dynamic culture where your growth is prioritized, your contributions are valued, and your potential is limitless. With ISPA Technology, you'll discover not just competitive compensation and comprehensive benefits but a path to professional enlightenment and fulfillment.

Responsibilities:

1. Maintain and report Assess Only (AO) and Assessment and Authorization (A&A) status to Program Managers, Information System Owners, and ISSMs.
2. Manage and maintain Plan of Actions and Milestones (POA&M), ensuring vulnerabilities are properly tracked, mitigated, and where possible, remediated.
3. Register and maintain systems in Enterprise Mission Assurance Support Service (eMASS).
4. Plan and coordinate security control testing during Risk Assessments and Annual Security Reviews.
5. Review all data produced by Continuous Monitoring activities, update the eMASS record as necessary, and escalate to leadership for action, if required.
6. Correlate findings from non-RMF vulnerability to RMF controls for tracking.
7. Maintain vulnerability data in Vulnerability Remediation Asset Manager (VRAM).

Required Qualifications:

1. Department of Defense SECRET Security Clearance
2. IAM II Certification
3. 6+ years of relative and progressive experience
4. Bachelor’s degree in Computer Science, Information Technology, Communications Systems Management, or an equivalent STEM degree from an accredited college or university.

Why Choose ISPA Technology?

1. Competitive salary packages with bonus potential.
2. Comprehensive health, vision, and dental coverage.
3. Generous PTO allotment and 11 paid holidays.
4. Robust life and disability insurance options.
5. 401(K) with company match, for your future.
6. A culture of recognition and rewards for your contributions.
7. Opportunities for relocation and professional development.

ISPA Technology is dedicated to creating a diverse and inclusive work environment. All qualified candidates will receive equal consideration for employment without regard to race, religion, color, national origin, sex, sexual orientation, gender identity, age, veteran status, or any other protected classification.