Information Systems Security Officer

Sadna Consulting Inc; Fort Belvoir (VA); On-site; USD 90,000 - 120,000; Full time

Job summary

A US-based consulting firm is looking for an Information Systems Security Officer (ISSO) with a focus on security policies implementation and ATO processes. The ideal candidate will have at least 8 years of experience and a Bachelor's degree in Cyber Security and Leadership. Responsibilities include ensuring security policies are followed, creating system documentation, and working with vulnerability scanning tools. Strong knowledge of NIST standards is crucial, along with experience in cloud security. This position is full-time and located in the Fort Belvoir, VA area.

Qualifications

• Experience with gaining an ATO for systems through assessment and authorization.
• Strong understanding of RMF, CNSSI 1253, NIST 800-53, and NISPOM.
• Experience with cloud security.

Responsibilities

• Ensure security policies and procedures are implemented.
• Create and maintain system BOE documents including SSPs and architecture diagrams.
• Ability to write and modify documents including SOPs and processes.

Skills

Security policies implementation

Experience with ATO processes

Vulnerability scanning tools

RMF and NIST standards

System documentation

SOPs and guidance documentation

JIRA and requirements management

Education

Bachelor's degree in Cyber Security and Leadership

Tools

Nessus

AppDetective

WebInspect

Job description

About the job Information Systems Security Officer

Title: Information Systems Security Officer (ISSO)-Expert

Duration: Full-time

Location: Fort Meade, MD area and Fort Belvoir, VA

Clearance: TS/SCI

Required Skills:

• Ensure security policies and procedures are implemented
• Experience with gaining an ATO for systems and working the systems through the assessment and authorization process
• Experience with vulnerability scanning tools including Nessus, AppDetective, Weblnspect, and other vulnerability scanning tools
• Strong understanding of RMF, CNSSI 1253, NIST 800-53, and NISPOM.
• Ability to create and maintain system BOE documents to include SSPs, architecture diagrams, contingency planning, and continuous monitoring documentation
• Ability to write and modify documents to include SOPs, processes, and other guidance documentation
• Experience with JIRA and requirements management
• Desired Skills
• Security Certifications: CISSP, CISM, CISA, CEH, NCSF, CAP
• Experience with cloud security.
• Years of Experience: 8 and a BS degree in Cyber Security and Leadership required.