Information Systems Security Officer CyberESI Consulting Group

Level Up Careers; Northern (KY); Hybrid; USD 70,000 - 120,000; Full time

Job summary

A cybersecurity firm in Maryland seeks Information Systems Security Officers (ISSO) to document and manage cyber risks related to information systems. You will work closely with security engineers and assessors to ensure compliance with federal regulations and standards, such as NIST SP 800-53. Candidates with a Bachelor's degree and relevant certifications (e.g., Security+, CISSP, CISM) are encouraged to apply. This role offers opportunities for professionals at various experience levels.

Qualifications

• Understanding of Federal Information Security Modernization Act (FISMA) requirements.
• Proven ability to track and resolve cyber risks.
• Experience with security certifications like Security+, CISSP, or CISM is valuable.

Responsibilities

• Document and manage cyber risks to information systems.
• Collaborate with teams to make informed risk decisions.
• Fulfill the Monitor step of the NIST Risk Management Framework.

Skills

Knowledge of NIST SP 800-53 controls

Risk management

Collaboration with Security Assessors

Documentation of security plans

Education

Bachelor's degree in Information Systems or related field

Job description

Simply put, Information Systems Security Officers (ISSO) document and manage cyber risks to information systems. Often, this takes the form of:

• knowing the state of National Institute of Standards and Technology (NIST) Special Publication (SP) 800-53 security and privacy controls for information systems,
• documenting the state of NIST SP 800-53 security and privacy controls in a system security plan (SSP) for each information system, and
• tracking the resolution of residual risk in each information system, as recorded in a plan of action & milestones (POA&M) document.

To accomplish the above responsibilities, ISSOs work in collaboration with Security Controls Assessors (SCA) and Information Systems Security Engineers to stage risk decisions made by an Authorizing Official (AO).

In particular, ISSOs are responsible for the Monitor step of the NIST Risk Management Framework (RMF) process to fulfill the Federal Information Security Modernization Act (FISMA). However, ISSOs may manage cyber risks based on all manner of Information Assurance (IA) requirements including laws, regulation, and policy.

This job description is meant to advertise a range of ISSOs from Bachelors and 0 years of experience, through and including Bachelors and 20 years of experience. More experienced candidates will require certifications to qualify for contract labor categories, such as: Security+, Certified Information System Security Professional (CISSP) and/or Certified Information Security Manager (CISM).