Information Systems Security Officer (ISSO)

Credence Management Solutions, LLC; Arlington (VA); On-site; USD 120,000 - 170,000; Full time

Job summary

Credence Management Solutions, LLC in the Washington, DC area is seeking an Information System Security Officer (ISSO) to support RMF-based A&A for the USMS P30 system, ensuring compliance with DOJ security requirements.

The role requires developing and updating security artifacts, advising system owners, conducting risk analyses, and coordinating remediation and incident response activities, with 8+ years of experience, a Bachelor’s degree, and a current clearance (CISSP/CISA/CISM preferred).

Qualifications

• Bachelor's Degree (or significant equivalent experience) required.
• Must possess certification(s) in CISSP, CISA, or CISM.
• Secret clearance is required.
• Minimum 8 years of experience in IA/cybersecurity.
• Ability to work independently with a diverse team.

Responsibilities

• Advise system owners on security posture and RMF readiness.
• Perform A&A activities on classified and unclassified networks per RMF.
• Develop/update artifacts for control families (SSP, contingency planning, incident response, configuration management).
• Perform compliance reviews, tracking, and continuous monitoring of multiple networks, systems and applications.
• Develop Systems Security Plans (SSP) and support remediation through lifecycle.
• Support Incident Response and Contingency activities.
• Review information for DOJ OCIO reviews for FISMA inventory.

Skills

Strong written and verbal comms

Education

Bachelor's Degree (or significant equivalent experience)

CISSP/CISA/CISM certifications

Job description

Overview

Join a team where innovation meets mission. Our AI, cloud, cyber, and modernization solutions save agencies thousands of hours, safeguard national security, and strengthen health and humanitarian missions worldwide. With more than 1,700+ team members, 1,500+ AI & data experts, and 100+ prime contracts, we deliver at scale and with purpose.

We've been recognized as a Top Workplace by The Washington Post for six consecutive years and named to the Inc. 5000 list of Fastest-Growing Private Companies in 13 of the past 14 years. Credence is a welcoming environment for those looking to grow and make a meaningful impact. We encourage employees to push boundaries and help solve critical, world-changing federal challenges.

Credence has an immediate need for an Information System Security Officer (ISSO) to provide IT professional support for Information System Security Officer (ISSO) and Security Control Assessment (SCA) activities, working with United States Marshals Service (USMS) system owners and other operations and maintenance (O&M) staff to ensure compliance with DOJ security requirements and standards for the USMS P30 system.

Responsibilities include, but are not limited to ...

The ISSO support will include developing and maintaining an IT System Security Compliance Schedule covering 12-month intervals that capture POA&M Action Items, required ITSS reports/updates, Change Control Board Meetings, Scheduled Vulnerability Scans, and Updates to System IT Security Documentation. Support includes the following:

• Advise the systems owner on the security posture of their systems.


• Perform assessment and authorization (A&A) activities on classified and unclassified networks in accordance with the DOJ/NIST Risk Management Framework (RMF).


• Develop and update artifacts for all control families (Security Categorization, SSP, Contingency Planning, Incident Response, Configuration Management, etc.).


• Perform compliance assessment reviews, tracking, and continuous monitoring of multiple networks, systems, and applications.


• Advise stakeholders throughout the entire lifecycle of the A&A process to include the development of Systems Security Plans (SSP).


• Perform System Categorization in accordance with FIPS-199 and CNSS 1253.


• Perform security control assessments in accordance with NIST 800-53A.


• Develop/edit/review Security Assessment Plans using CSAM.


• Perform risk analysis and prepare reports on networks, facilities and systems.


• Review, create and validate Security Assessment Reports.


• Develop and maintain the Plan of Action and Milestones (POA&M) statements, and support remediation activities through their lifecycle.


• Support Incident Response and Contingency activities.


• Perform security impact analysis on all configuration change requests.


• Review information in support of DOJ OCIO review for FISMA inventory

Overview

Join a team where innovation meets mission. Our AI, cloud, cyber, and modernization solutions save agencies thousands of hours, safeguard national security, and strengthen health and humanitarian missions worldwide. With more than 1,700+ team members, 1,500+ AI & data experts, and 100+ prime contracts, we deliver at scale and with purpose.

We've been recognized as a Top Workplace by The Washington Post for six consecutive years and named to the Inc. 5000 list of Fastest-Growing Private Companies in 13 of the past 14 years. Credence is a welcoming environment for those looking to grow and make a meaningful impact. We encourage employees to push boundaries and help solve critical, world-changing federal challenges.

Credence has an immediate need for an Information System Security Officer (ISSO) to provide IT professional support for Information System Security Officer (ISSO) and Security Control Assessment (SCA) activities, working with United States Marshals Service (USMS) system owners and other operations and maintenance (O&M) staff to ensure compliance with DOJ security requirements and standards for the USMS P30 system.

Responsibilities include, but are not limited to ...

The ISSO support will include developing and maintaining an IT System Security Compliance Schedule covering 12-month intervals that capture POA&M Action Items, required ITSS reports/updates, Change Control Board Meetings, Scheduled Vulnerability Scans, and Updates to System IT Security Documentation. Support includes the following:

• Advise the systems owner on the security posture of their systems.


• Perform assessment and authorization (A&A) activities on classified and unclassified networks in accordance with the DOJ/NIST Risk Management Framework (RMF).


• Develop and update artifacts for all control families (Security Categorization, SSP, Contingency Planning, Incident Response, Configuration Management, etc.).


• Perform compliance assessment reviews, tracking, and continuous monitoring of multiple networks, systems, and applications.


• Advise stakeholders throughout the entire lifecycle of the A&A process to include the development of Systems Security Plans (SSP).


• Perform System Categorization in accordance with FIPS-199 and CNSS 1253.


• Perform security control assessments in accordance with NIST 800-53A.


• Develop/edit/review Security Assessment Plans using CSAM.


• Perform risk analysis and prepare reports on networks, facilities and systems.


• Review, create and validate Security Assessment Reports.


• Develop and maintain the Plan of Action and Milestones (POA&M) statements, and support remediation activities through their lifecycle.


• Support Incident Response and Contingency activities.


• Perform security impact analysis on all configuration change requests.


• Review information in support of DOJ OCIO review for FISMA inventory

• Secret clearance is required


• Bachelor's Degree (or significant equivalent experience)


• Minimum 8 years of experience


• Must possess certification(s) in CISSP, CISA, or CISM


• Must be able to function resourcefully and independently and work with a diverse team of IA/cybersecurity practitioners


• Strong written and verbal communication skills required


• Experience working within DOJ Offices, Boards, and Divisions (OBDs), with an understanding of unique organizational security policies and security controls implementations within specific IT environments is desired.

Salary Range: $120,000.00 to $170,000.00 annually. Actual compensation will be determined based on the selected candidate's experience, education, skills, and overall qualifications.