Information Systems Security Officer (ISSO)

CGS Federal (Contact Government Services); Fayetteville (AR); On-site; USD 92,000 - 126,000; Full time

Job summary

An established industry player is seeking a skilled Information Systems Security Officer (ISSO) to enhance cybersecurity measures and manage risks within government systems. This full-time role involves engaging with the RMF process, conducting security assessments, and ensuring compliance with established security standards. The ideal candidate will have a strong background in cybersecurity, particularly with DIACAP and RMF, and will be responsible for drafting security policies, managing vulnerabilities, and providing expert guidance on security solutions. Join a forward-thinking team dedicated to delivering innovative solutions and fostering professional growth in a supportive environment.

Benefits

Health Insurance

Dental Insurance

Vision Insurance

Life Insurance

401k

Flexible Spending Accounts

Paid Time Off

Qualifications

• 5+ years of experience in IA Analyst, ISSE, ISSO, or similar roles.
• Professional security certifications like CCNA Security or Security+.

Responsibilities

• Review systems for security weaknesses and recommend improvements.
• Manage cybersecurity risks and maintain a risk registry.
• Conduct risk assessments and provide guidance on mitigation strategies.

Skills

DIACAP

RMF

Cybersecurity Risk Management

Technical Writing

Microsoft Word

Microsoft Excel

eMASS

Education

Bachelor’s Degree

Master’s Degree in Cybersecurity

Tools

HBSS

ACAS

Job description

Information Systems Security Officer (ISSO)

3 weeks ago Be among the first 25 applicants

CGS Federal (Contact Government Services) provided pay range

This range is provided by CGS Federal (Contact Government Services). Your actual pay will be based on your skills and experience — talk with your recruiter to learn more.

Base pay range

$92,213.33/yr - $125,146.66/yr

Position Overview

CGS is seeking an experienced Information Systems Security Officer (ISSO) with expertise in DIACAP and/or RMF, focusing on security assessment documentation to support Department of Commerce systems and achieve Authorization to Operate (ATO). This full-time role is located at the Herbert Hoover building in Washington, DC, covering full lifecycle Assessment and Authorization (A&A) management within the RMF process, supporting the Government ISSM.

Key Responsibilities

1. Review systems for security weaknesses and recommend improvements.
2. Manage cybersecurity risks at the organizational level.
3. Identify and prioritize organizational risks; maintain a risk registry for leadership review.
4. Provide security guidance and validation using NIST RMF, DoC, and local policies.
5. Recommend configuration management practices for security software, hardware, and firmware, coordinating with ISSM, SCA, and AO.
6. Ensure compliance with vulnerability scanning tools like HBSS or ACAS and manage patching processes.
7. Support security authorization activities, including transition from DIACAP to RMF.
8. Offer cybersecurity expertise on trusted system technologies.
9. Develop solutions for complex cybersecurity problems through research and analysis.
10. Draft and review security assessments, policies, and reports, providing recommendations and feedback.
11. Conduct risk assessments, evaluate thresholds, and score findings.
12. Provide guidance on mitigation strategies and implement security risk solutions.

Qualifications

• Bachelor’s Degree
• At least five years of experience as an IA Analyst, ISSE, ISSO, or similar, with experience in ATO package development and security documentation.
• Experience with eMASS.
• Professional security certifications such as CCNA Security, CySA+, GICSP, GSEC, Security+, SSCP, or higher.
• Proficiency in Microsoft Word and Excel.
• Strong technical writing skills, including industry-standard grammar and structure.
• Ability to multitask effectively in deadline-driven environments.

Preferred Qualifications

• CISSP, CASP, or similar certification.
• Master’s Degree in Cybersecurity or related field.
• Strong organizational, analytical, and independent working skills.
• High ethical standards and dedication to quality.

Our Commitment

CGS strives to optimize resources and deliver innovative solutions to government challenges, fostering a supportive environment for professional growth. We value honesty, professionalism, and quality, offering comprehensive benefits including health, dental, vision, life insurance, 401k, flexible spending accounts, and paid time off.

Equal Opportunity Employer

We consider all applicants without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or veteran status.

Join Our Team

Explore more opportunities at CGS Job Board or visit our website at CGS Federal. Contact us at [e-mail].