Information Systems Security Officer Cyber Engineering Services

Level Up Careers; Northern (KY); Hybrid; USD 70,000 - 120,000; Full time

Job summary

A reputable cybersecurity firm in Maryland seeks Information Systems Security Officers to document and manage cyber risks according to NIST standards. Candidates at various experience levels are welcome to apply, from entry-level to senior roles requiring certifications like Security+ or CISSP. You will collaborate with security teams to fulfill compliance requirements and maintain information assurance practices.

Qualifications

• Bachelor's degree required with 0-20 years of experience.
• Certifications like Security+, CISSP, or CISM may be needed for experienced candidates.

Responsibilities

• Document and manage cyber risks to information systems.
• Collaborate with Security Controls Assessors and Engineers.
• Fulfill the Monitor step of the NIST Risk Management Framework.

Skills

Knowledge of NIST SP 800-53 security controls

Risk management principles

Collaboration skills

Education

Bachelor's degree in a relevant field

Job description

Simply put, Information Systems Security Officers (ISSO) document and manage cyber risks to information systems. Often, this takes the form of:

• knowing the state of National Institute of Standards and Technology (NIST) Special Publication (SP) 800-53 security and privacy controls for information systems,
• documenting the state of NIST SP 800-53 security and privacy controls in a system security plan (SSP) for each information system, and
• tracking the resolution of residual risk in each information system, as recorded in a plan of action & milestones (POA&M) document.

To accomplish the above responsibilities, ISSOs work in collaboration with Security Controls Assessors (SCA) and Information Systems Security Engineers to stage risk decisions made by an Authorizing Official (AO).

In particular, ISSOs are responsible for the Monitor step of the NIST Risk Management Framework (RMF) process to fulfill the Federal Information Security Modernization Act (FISMA). However, ISSOs may manage cyber risks based on all manner of Information Assurance (IA) requirements including laws, regulation, and policy.

This job description is meant to advertise a range of ISSOs from Bachelors and 0 years of experience, through and including Bachelors and 20 years of experience. More experienced candidates will require certifications to qualify for contract labor categories, such as: Security+, Certified Information System Security Professional (CISSP) and/or Certified Information Security Manager (CISM).