Information Systems Security Officer II

Program Management Solutions LLC; Washington (District of Columbia); Hybrid; USD 110,000 - 170,000; Full time

Job summary

PMdigital.ai is seeking an Information Systems Security Officer to join our growing team. The role is primarily remote, with possible on-site work at IHSC Headquarters in Washington, DC as needed.

Responsibilities include developing and maintaining RMF documentation, security-control analyses, continuous-monitoring, and incident-response coordination. Strong writing, analytical, and coordination skills are essential, with Federal cybersecurity experience preferred.

Qualifications

• Experience supporting Federal cybersecurity, information-security, RMF, security-authorization, or continuous-monitoring activities.
• Knowledge of NIST cybersecurity standards and guidance, Federal information-security requirements, vulnerability management, security controls, and risk management.
• Ability to develop and maintain high-quality security-authorization and cybersecurity documentation.
• Ability to analyze security findings, vulnerabilities, evidence, and compliance requirements.
• Strong technical writing, analytical, organizational, coordination, and communication skills.
• Experience supporting Federal or similarly regulated information systems is preferred.
• Relevant industry-recognized cybersecurity certification is preferred.

Responsibilities

• Develop, maintain, coordinate, and track security-authorization and RMF documentation and supporting evidence.
• Develop and maintain system-security documentation, control narratives, security plans, risk documentation, POA&M information, continuous-monitoring records, and other required cybersecurity artifacts.
• Collect, analyze, validate, and organize security-control implementation evidence.
• Conduct security-control, compliance, vulnerability, risk, and documentation analyses and document findings.
• Support security assessment and authorization activities by preparing required packages, coordinating artifacts, tracking deficiencies, and resolving documentation issues.
• Maintain authorization-package status, milestones, dependencies, risks, issues, and outstanding actions.
• Support continuous-monitoring activities, including analysis and tracking of security controls, vulnerabilities, findings, remediation activities, and required evidence.
• Analyze vulnerability and security findings, document risk and remediation information, and track approved remediation activities.
• Support incident-response coordination, documentation, status tracking, evidence collection, technical-response activities within the authorized scope, and required reporting.
• Develop cybersecurity status reports, dashboards, briefings, risk summaries, and other required products. Coordinate cybersecurity activities with system owners, technical teams, privacy personnel, data personnel, project/program personnel, and applicable Government security stakeholders.
• Assess alignment with applicable NIST, FISMA, DHS, ICE, and other applicable cybersecurity requirements and document gaps and corrective actions.
• Maintain cybersecurity documentation in authorized Government repositories and systems.

Skills

Federal cybersecurity

NIST standards

RMF experience

Security-authorization

Continuous-monitoring

Technical writing

Coordination

Communication

Job description

PMdigital.ai is looking for an Information Systems Security Officer to join our growing team. This work will be performed primarily in a remote/virtual environment but may require on-site activities at IHSC Headquarters in Washington, DC on an as-needed basis, as determined by the Government.

Duties and Responsibilities

• Develop, maintain, coordinate, and track security-authorization and Risk Management Framework documentation and supporting evidence.
• Develop and maintain system-security documentation, control narratives, security plans, risk documentation, POA&M information, continuous-monitoring records, and other required cybersecurity artifacts.
• Collect, analyze, validate, and organize security-control implementation evidence.
• Conduct security-control, compliance, vulnerability, risk, and documentation analyses and document findings.
• Support security assessment and authorization activities by preparing required packages, coordinating artifacts, tracking deficiencies, and resolving documentation issues.
• Maintain authorization-package status, milestones, dependencies, risks, issues, and outstanding actions.
• Support continuous-monitoring activities, including analysis and tracking of security controls, vulnerabilities, findings, remediation activities, and required evidence.
• Analyze vulnerability and security findings, document risk and remediation information, and track approved remediation activities.
• Support incident-response coordination, documentation, status tracking, evidence collection, technical-response activities within the authorized scope, and required reporting. Authorized Government officials retain responsibility for official incident-response direction, reporting determinations, and applicable risk decisions.
• Develop cybersecurity status reports, dashboards, briefings, risk summaries, and other required products. Coordinate cybersecurity activities with system owners, technical teams, privacy personnel, data personnel, project/program personnel, and applicable Government security stakeholders.
• Assess alignment with applicable NIST, FISMA, DHS, ICE, and other applicable cybersecurity requirements and document gaps and corrective actions.
• Maintain cybersecurity documentation in authorized Government repositories and systems.

Required Knowledge, Skills, and Abilities

• Demonstrated experience supporting Federal cybersecurity, information-security, Risk Management Framework, security-authorization, or continuous-monitoring activities.
• Knowledge of NIST cybersecurity standards and guidance, Federal information-security requirements, vulnerability management, security controls, and risk management.
• Ability to develop and maintain high-quality security-authorization and cybersecurity documentation.
• Ability to analyze security findings, vulnerabilities, evidence, and compliance requirements.
• Strong technical writing, analytical, organizational, coordination, and communication skills.
• Experience supporting Federal or similarly regulated information systems is preferred.
• Relevant industry-recognized cybersecurity certification is preferred.