Information Systems Security Officer

Davita Inc.; Washington (District of Columbia); On-site; USD 100,000 - 140,000; Full time

Job summary

Davita Inc. is seeking an Information System Security Officer (ISSO) to manage cybersecurity responsibilities. The role involves collaborating with system owners to ensure compliance and maintain the security posture of organizational systems. Candidates should have a Bachelor's degree and significant cybersecurity experience, alongside relevant certifications.

Benefits

Health Coverage

Dental Coverage

Vision Coverage

401(k) with Company match

Paid Time Off (Vacation/Sick)

Qualifications

• 7+ years of relevant cyber security experience in a Senior Position.
• CISM certification required, CISSP desired.

Responsibilities

• Identify security and privacy requirements for the system.
• Conduct risk assessments and document results.
• Develop strategies for monitoring security controls' effectiveness.

Skills

Cybersecurity

Risk Assessment

Security Controls

Stakeholder Management

Education

Bachelors Degree in a related IT field

Job description

The information system security officer (ISSO) is responsible for the cybersecurity of a program, organization, system, or enclave. The ISSO ensures that the security and privacy posture is maintained for an organizational system and works in close collaboration with the FDIC system owner. The ISSO serves as a principal advisor on all matters, technical and otherwise, involving the security and privacy controls for the system and has the knowledge and expertise to manage the security and privacy aspects of an organizational system.

• Identify the security and privacy requirements allocated to a system and to the organization.
• Collaborate with the System Owner to categorize the system and document the security categorization results as part of system requirements.
• Identify stakeholders who have a security and/or privacy interest in the development, implementation, operation, or sustainment of a system.
• Conduct an initial risk assessment of stakeholder assets and update the risk assessment on an ongoing basis.
• Select the security and privacy controls for a system and document the functional description of the planned control implementations in a security/privacy
• Develop a strategy for monitoring security and privacy control effectiveness; coordinate the system-level strategy with the organization and mission/business process-level monitoring strategy.
• Develop, review, and approve a plan to assess the security and privacy controls in a system and the organization.
• Document changes to planned security and privacy control implementation and establish the configuration baseline for a system.
• Respond to system risk posture based on the results of ongoing monitoring activities, assessment of risk, and outstanding items in a plan of action and milestones (POA&M).
• Prepare a plan of action and milestones based on the findings and recommendations of a security assessment report excluding any remediation actions taken.
• Update a security plan, security assessment report, and plan of action and milestones based on the results of a continuous monitoring process.
• Review the security and privacy status of a system (including the effectiveness of security and privacy controls) on an ongoing basis to determine whether the risk remains acceptable.
• Report the security status of a system (including the effectiveness of security and privacy controls) to an authorizing official on an ongoing basis in accordance with the monitoring strategy.
• Ensure that plans of actions and milestones or remediation plans are in place for vulnerabilities identified during risk assessments, audits, inspections, etc.
• Ensure that security improvement actions are evaluated, validated, and implemented as required.

Job Requirements

• Bachelors Degree in a related IT field.
• 7+ years of relevant cyber security experience in a Senior Position.
• CISM Required & CISSP Desired

Applicants selected for this position will be subject to a government security investigation and must meet eligibility requirements for access to classified information. Please note that only US Citizens are eligible for a security clearance.

About Us

If you would like to be part of a hard-working company that works with a sense of purpose, Paragon could be the place for you.

We recognize and celebrate diversity and success and offer an ideal work/life balance. Many of our employees work here for a long time because of the satisfaction the find in the work itself. They also enjoy our generous family-oriented health, vacation, and financial benefits.

Paragon is dedicated to helping our employees thrive...

• Our employees are precious resources, and we are committed to their well-being and personal growth.
• We are fundamentally focused on satisfying both our employees and customers.
• We consistently exhibit integrity, dedication, and excellence in all that we do.
• We provide people with the right skills and tools to succeed and grow professionally.
• We celebrate and share our successes with our employees first and foremost.

Paragon offers competitive benefits to make health and wellness a priority for every employee.

• Health and Wellness
• Health Coverage
• Dental Coverage
• Vision Coverage
• Flexible Spending and HSA Accounts
• Employee Assistance Program
• Short- and Long-Term Disability
• Life/AD&D Insurance
• Work/Life Balance
• 401(k) with Company match
• Paid Time Off (Vacation/Sick)
• Paid Leave (Including Military Leave)
• Holiday Pay

Paragon is an Equal Opportunity Employer and does not discriminate in employment opportunities or practices on the basis of race, color, religion, gender, national origin, age, sexual orientation, gender identity, disability, veteran status, or any other characteristic protected by country, regional, or local law.

We are a VEVRAA Federal Contractor participating in eVerify.