ISSO

Saliense; United States; Remote; USD 90,000 - 130,000; Full time

Job summary

Saliense is seeking an Information System Security Officer (ISSO) to safeguard sensitive information by applying RMF and NIST CSF, implementing protection strategies, and evaluating security controls. The role requires collaboration with developers, engineers, and managers to maintain high security standards.

The ISSO will conduct risk and vulnerability assessments, develop security documentation, and recommend improvements to strengthen the client’s security posture within federal guidelines.

Qualifications

• 5+ years of experience in information security or related field.
• Experience with RMF and the NIST Cybersecurity Framework.
• Knowledge of federal information system security policy and FISMA requirements.
• Ability to design and implement protections for confidentiality, integrity, and availability of sensitive information.
• Experience evaluating security products and providing actionable recommendations.
• Familiarity with security documentation such as contingency plans and POA&Ms.

Responsibilities

• Serve as an information security expert in vulnerability assessment, risk assessment, network security, product evaluation, and security implementation.
• Design and implement solutions to protect confidentiality, integrity, and availability of sensitive information.
• Provide technical evaluations of customer systems and assist with security improvements.
• Participate in business impact analysis, system categorization, contingency plans, and privacy documentation.
• Conduct testing and audit log reviews to evaluate security measures.
• Conduct security product evaluations and recommend upgrades to improve the customer’s security posture.

Skills

RMF

NIST CSF

Network security

Vulnerability assessment

Risk assessment

Security implementation

Security product evaluations

POA&M management

System authorizations

Configuration management

System analysis

Cybersecurity policy

Compliance

Tools

JCAM

Job description

The Information System Security Officer (ISSO) supports work performed under the contract possessing a substantial level of knowledge of federal information system security policy, industry best practices, security control assessments, Plan of Action and Milestones (POA&M) management, system authorizations, configuration management, and system analysis. Responsible for designing and implementing solutions for protecting the confidentiality, integrity, and availability of sensitive information.

Responsibilities

• Serves as a recognized information security expert in the areas of vulnerability assessment, risk assessment, network security, product evaluation, and security implementation.
• From a technical perspective the Information System Security Officer is responsible for designing and implementing solutions for protecting the confidentiality, integrity, and availability of sensitive information.
• Provides technical evaluations of customer systems and assists with making security improvements.
• Participates in the design of information system business impact analysis, system categorization, contingency plans, privacy documents, and other system security documentation to maintain appropriate levels of protection and meet requirements for minimizing operational impact to the enterprise.
• Conducts testing and audit log reviews to evaluate the effectiveness of current security measures.
• Conducts security product evaluations, and recommends products, technologies, and upgrades to improve the customer’s security posture.

Requirements

• 5+ years of relevant experience
• Experience with RMF and applying the NIST Cybersecurity Framework.
• Possesses substantial knowledge of federal information system security policy, industry best practices, security control assessments, Plan of Action and Milestones (POA&M) management, system authorizations, configuration management, and system analysis
• Experience designing and implementing solutions for protecting the confidentiality, integrity, and availability of sensitive information. - A technical expert providing technical support in the areas of vulnerability assessment, risk assessment, network security, product evaluation, and security implementation.
• Experience designing and implementing solutions for protecting the confidentiality, integrity, and availability of sensitive information.
• Experience using JCAM highly preferred, not required.
• Solid understanding and application of NIST Special Publications including SP 800-53
• Solid understanding of FISMA audit requirements.
• Solid understanding of IT audit requirements.
• Ability to work with cooperatively and at a technical level with developers, engineers, and managers on system teams.
• Knowledge of computer networking concepts, protocols, and network security methodologies.
• Knowledge of risk management processes and tools (e.g., methods and tools for assessing and mitigating risks).
• Knowledge of laws, regulations, policies, and ethics as they relate to cybersecurity and privacy in a federal environment.
• Knowledge of current and past cybersecurity threats and vulnerabilities.