Information Systems Security Officer (ISSO) / Information Systems Security Manager (ISSM)-RS3 P[...]

People Technology And Processes; Arlington (VA); On-site; USD 110,000 - 160,000; Full time

Job summary

People Technology And Processes is seeking an Information Systems Security Officer (ISSO) / Information Systems Security Manager (ISSM) in Arlington, VA (Remote). You will ensure cybersecurity is integrated in all lifecycle phases and support the government’s RMF efforts to maintain the CoS application’s security posture.

The ideal candidate has a Bachelor’s degree or equivalent experience, at least three years in DoD, and holds CISSP, CISM, CISA, and CEH certifications among others listed.

Qualifications

• Bachelor’s Degree or equivalent experience.
• Minimum of three years of experience, one within DoD.
• Certifications: CISSP, CISM, CISA, CompTia Security+, CRISC, ISO/IEC 27001 Lead Implementer or Lead Auditor, CEH.

Responsibilities

• Ensure cybersecurity is integrated in all phases of the lifecycle sustainment and proactively support RMF for the CoS application's security posture.
• Identify and mitigate code vulnerabilities using Fortify; prioritize findings and provide POAM.
• Develop POA&M for non-compliant controls to meet assessment and authorization requirements.

Skills

RMF knowledge

Education

Bachelor’s Degree or equivalent experience

CISSP

CISM

CISA

CompTia Security+

CRISC

ISO/IEC 27001 Lead Implementer or Lead Auditor

CEH

Job description

Position Title

Information Systems Security Officer (ISSO) / Information Systems Security Manager (ISSM)

Location

Arlington, VA (Remote) (Arlington, VA 22202)

Clearance Level

Secret

Responsibilities

• Ensure cybersecurity is integrated in all phases of the lifecycle sustainment and proactively support the Government’s efforts to maintain, update and continuously monitor Chief of Staff (CoS) application’s security posture, in accordance with the Risk Management Framework (RMF).
• Identify and mitigate code vulnerabilities as measured by government provided “Fortify” tool; ensure that Development Teams prioritize findings in accordance with command priorities and provide POAM for Fortify findings.
• Develop Plan of Action & Milestones (POA&M) for non-compliant controls to meet assessment and authorization requirements.

Qualifications

• Bachelor’s Degree in related field of study or equivalent experience.
• Minimum of three years of experience, one within DoD.
• Certifications: Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Certified Information Systems Auditor (CISA), CompTia Security +, Certified in Risk and Information Systems Control (CRISC), ISO/IEC 27001 Lead Implementer or Lead Auditor, Certified Ethical Hacker (CEH).