Information System Security Officer / ISSO

NXTKEY CORPORATION; Washington (District of Columbia); On-site; USD 80,000 - 120,000; Full time

Job summary

NXTKEY CORPORATION is seeking an Information System Security Officer (ISSO) in Washington, D.C. This full-time position requires expertise in cybersecurity and system authorization. You will conduct assessments, manage risks, and ensure compliance with federal security standards.

The ideal candidate will possess a B.A. or B.S. in Computer Science, experience in information security documentation, and must hold an active Public Trust clearance.

Qualifications

• Active Public Trust clearance, adjudicated within past 5 years.
• Must have worked on US Federal Government Projects.

Responsibilities

• Perform Certification & Accreditation (C&A) as part of NIST SP 800-37 RMF.
• Manage emerging and defined risks associated with information systems.
• Coordinate with the client’s Cybersecurity Unit for compliance.

Skills

System authorizations and configuration management

Creating or modifying information security documentation

Testing and documenting information security controls

Education

B.A. or B.S. in Computer Science or a related field

Job description

Information System Security Officer / ISSO

Full-time

NXTKey provides commercial and government entities with the horsepower to drive their business machine faster and more efficiently to successful outcomes. To support our customers' needs; we excel at providing Cyber Security, Enterprise Information Management, ICT Consulting, Development, Project Management and Business Process Services and Solutions.

Information System Security Officer / ISSO duties include:

• Perform Certification & Accreditation (C&A), System Assessment & Authorization (SA&A) as part of NIST SP 800-37 Risk Management Framework (RMF) system and application accreditation
• Prepare Vulnerability Scanning test plans, coordinate testing, and conduct scans using Nessus, Foundstone, WebInspect, Hailstorm and other scan applications

Evaluation of the assigned information systems’ security control compliance with the federal requirements and the client’s monitoring strategy

Management of emerging and defined risks associated with the administration and use of assigned information systems

Coordination with the client’s Cybersecurity Unit to achieve and maintain the information systems’ compliance and authorization to operate (ATO)

Ensuring systems are operated, maintained, and disposed of in accordance with policies outlined in the approved security authorization package

Performing annual assessments to ensure compliance with the client’s policies and standards

Serve as a member of the Configuration Control Board (CCB) to ensure configuration management for Cybersecurity-relevant software, hardware, and firmware is maintained and documented

Ensuring information system security requirement are addressed during all phases of information systems lifecycle

Establishing audit trails, ensuring their review, and making them available while retaining audit logs in accordance of DOJ and component policies

Generate and interpret documentation needed to address the items detailed within the GRC tool

Work within a team environment to provide technically sound guidance order to adhere to the cybersecurity industry best practices and the client’s monitoring strategy

Analyze collected information to identify vulnerabilities and potential for exploitation and effectively present the results and guidance derived from scans to system owners or other leadership, as required

Effectively communicate orally and in writing to track and detail the demands, efforts, and shortcomings in meeting the goals of the client’s information system monitoring strategy

Support the integration/testing, operations, and maintenance of systems security

Develops, updates, and maintains internal Standard Operating Procedures for all internal assigned functions

Aligns business processes and information technology strategy with the conditions and circumstances of the functional environment and establishes effective performance measures

Contributes to the definition and implementation of planning processes and/or systems at the enterprise level including both strategic and operational activities

Provides system operation support, administers hardware and software inventory

Required Skills

• B.A. or B.S. in Computer Science or a related field
• System authorizations and configuration management
• Experience creating or modifying information security documentation
• Experience testing and documenting information security controls (NIST SP 800-53)

Active Public Trust clearance, adjudicated within past 5 years.

Must have worked on US Federal Government Projects.