Information Systems Security Officer (ISSO) / Information Systems Security Manager (ISSM)

Rividium Inc; Arlington (VA); On-site; USD 90,000 - 120,000; Full time

Job summary

A leading cybersecurity firm is seeking an Information Systems Security Officer/Manager to ensure cybersecurity integration throughout the lifecycle sustainment. The role involves maintaining security posture and compliance with the Risk Management Framework for a federal client. Candidates should have relevant experience and certifications, including CISSP or CISM.

Qualifications

• At least three years of relevant experience, including one year within DoD.
• Possession of Secret Security Clearance.

Responsibilities

• Achieving and maintaining Authorization to Operate (ATO) and Authority to Connect (ATC).
• Updating eMASS with all required artifacts.
• Identifying and mitigating code vulnerabilities using tools like Fortify.

Skills

Cybersecurity

Risk Management Framework

Vulnerability Mitigation

Education

Bachelor's degree in a related field

Tools

Fortify

Job description

Cyber Intelligence Alliance (CIA) Joint Venture (JV) is seeking an Information Systems Security Officer (ISSO) / Information Systems Security Manager (ISSM) (contingent upon award) to support a federal client. The role involves ensuring cybersecurity is integrated throughout all phases of the lifecycle sustainment and proactively supporting the Government's efforts to maintain, update, and monitor the security posture of the Chief of Staff (CoS) application in accordance with the Risk Management Framework (RMF).

Key tasks and activities include:

1. Achieving and maintaining Authorization to Operate (ATO) and Authority to Connect (ATC).
2. Updating eMASS with all required artifacts.
3. Developing Plan of Action and Milestones (POA&M) for non-compliant controls to meet assessment and authorization requirements.
4. Ensuring all releases are Information Assurance (IA) compliant with applicable STIGs, Nessus, and IAVA.
5. Assisting with system interface agreement processes.
6. Identifying and mitigating code vulnerabilities using tools like Fortify.
7. Prioritizing findings with Development Teams based on customer priorities and providing POAM for Fortify findings.
8. Supporting the customer for independent verification and notifying the Product Owner of vulnerability mitigation issues.

Minimum qualifications include:

1. Bachelor's degree or higher in a related field or equivalent experience.
2. At least three (3) years of relevant experience, including one year within DoD.
3. Secret Security Clearance.
4. Possession of one of the following or equivalent certifications:

• Certified Information Systems Security Professional (CISSP)
• Certified Information Security Manager (CISM)
• Certified Information Systems Auditor (CISA)
• CompTIA Security+
• Certified in Risk and Information Systems Control (CRISC)
• ISO/IEC 27001 Lead Implementer or Lead Auditor
• Certified Ethical Hacker (CEH)

About RiVidium, Inc. (dba TripleCyber): Established in 2008, RiVidium is a VA-Verified SDVOSB and SBA-Certified 8(a) company. We aim to attract top talent to "Strive to be the missing element defining tomorrow's technology." We excel in Logistics, Human Capital, Cyber, Intelligence, and Technology sectors.

EOE Statement: We are an equal employment opportunity employer. All qualified applicants will receive consideration regardless of race, color, religion, sex, national origin, disability, protected veteran status, or any other characteristic protected by law. For accommodations during the employment process, contact Human Resources at [emailprotected].

This position is currently accepting applications.