Information Systems Security Officer (ISSO)

CGS Federal (Contact Government Services); Miami (FL); On-site; USD 92,213 - 125,146; Full time

Benefits offered by this job

Health Insurance

401k

Paid Time Off

Flexible Spending Accounts

Job summary

A government services company is seeking an Information Systems Security Officer (ISSO) to support Department of Commerce systems. The ideal candidate has a Bachelor's Degree, 5+ years of experience, and relevant professional certifications. Responsibilities include conducting security assessments and managing cyber security risks. Offering a comprehensive benefits package including health and wellness plans.

Qualifications

• Minimum five years of experience in roles related to information security.
• Professional security certification such as CompTIA Security+ CE or higher.

Responsibilities

• Conduct security assessments and information system security oversight.
• Manage cyber security risks and maintain a risk registry.
• Provide configuration management recommendations.

Skills

Information Assurance (IA) Analysis

eMASS experience

Strong desktop publishing skills

Analytical thinking

Education

Bachelor’s Degree

Tools

Microsoft Word

Microsoft Excel

Job description

Information Systems Security Officer (ISSO)

CGS Federal (Contact Government Services) is seeking an Information Systems Security Officer (ISSO) with DIACAP and/or RMF experience who has deep expertise in security assessment documentation to support Department of Commerce systems and efforts to achieve their Authorization to Operate (ATO). This position is located at the client site in the Herbert Hoover Building in Washington, DC. The scope includes full life-cycle Assessment and Authorization (A&A) management through all 6 Steps of the RMF process to support the Government ISSM. Responsibilities include conducting security assessment and information system security oversight activities in accordance with NIST 800-53 and RMF requirements.

Base pay range: $92,213.33/yr - $125,146.66/yr. Employment Type: Full-Time, Experienced. Department: Information Technology.

CGS brings motivated, highly skilled, and creative people together to solve the government’s most dynamic problems with cutting-edge technology. We offer opportunities for professional growth and an environment that supports employees.

Responsibilities:

• Review systems to identify potential security weaknesses and recommend improvements to amend vulnerabilities, implement changes, and document upgrades
• Maintain responsibility for managing cybersecurity risk from an organizational perspective
• Identify organizational risks, prioritize those risks, and maintain a risk registry for escalation and presentation to senior leadership
• Provide security guidance and IS validation using the National Institute of Standards and Technology (NIST) RMF, DoC, and local security policies
• Provide configuration management (CM) recommendations for information system security software, hardware, and firmware; coordinate changes with the ISSM, Security Control Assessor (SCA), and Authorizing Official (AO)
• Maintain vulnerability scanning tool compliance (HBSS or ACAS) and patch management (IAVM) to ensure patches are applied and compliance is maintained
• Support security authorization activities, including transitioning from legacy DIACAP to DoC RMF
• Provide subject matter expertise for cyber security and trusted system technology
• Apply advanced technical knowledge to develop solutions for complex problems
• Research, write, review, and finalize recommendations regarding cyber security policy, assessment and authorization (A&A) documents, security test and evaluation reports, and security engineering practices
• Conduct risk assessment research and write risk assessment reports including evaluation and scoring
• Support findings analysis and provide expert guidance for mitigation strategies and implementation

Qualifications:

• Bachelor’s Degree
• Minimum five (5) years of experience as an Information Assurance (IA) Analyst, ISSE, ISSO, or similar role in ATO package development, including generating security documentation for requirements, control assessment, STIG/IAVA compliance, SOPs, and test results
• eMASS experience
• Professional security certification such as CCNA Security, CySA+, GICSP, GSEC, CompTIA Security+ CE, SSCP, or higher
• Strong desktop publishing skills using Microsoft Word and Excel
• Experience with industry writing styles (grammar, sentence form, structure)
• Ability to multi-task in a deadline-oriented environment

Ideally, you will also have:

• CISSP, CASP, or similar certificate preferred
• Master's Degree in Cybersecurity or related field
• Strong initiative, attention to detail, organizational skills, and analytical thinking
• Ability to work independently and as part of a team
• Excellent work ethic and commitment to quality

Our Commitment: Contact Government Services (CGS) strives to simplify and enhance government processes through optimized resources and cutting-edge technology. We are committed to solving the most challenging and dynamic problems while fostering a respectful, growth-oriented work environment. We offer a comprehensive benefits package including Health, Dental, and Vision; Life Insurance; 401k; Flexible Spending Accounts; Paid Time Off and holidays. CGS is an Equal Opportunity Employer. Applicants are considered without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or veteran status.

Join our team and become part of government innovation!

For more information or to explore additional opportunities, visit: https://cgsfederal.com/join-our-team/ or https://www.cgsfederal.com

Contact: Email: [e-mail]