ISSO: Lead Cybersecurity for Government Systems (On-site SCIF)

Tharros; Washington (District of Columbia); On-site; USD 120,000 - 160,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

Disability coverage

Retirement savings

Paid leave

Education reimbursement

Referral bonuses

Job summary

Tharros, a leader in cybersecurity services, seeks an Information System Security Officer (ISSO) to independently own security postures for DHS Intelligence Enterprise systems, including cross-domain and cloud environments, per ICD 503 and DHS 4300C. On-site in a Government SCIF in Washington, DC.

You will develop ATO packages, perform RMF-related assessments, manage POA&Ms and risk exceptions, conduct audits, and report metrics to ISSMs. A TS clearance with SCI eligibility is required.

Qualifications

• BS degree in Information Technology, Cybersecurity, Information Systems, or Computer Science OR minimum of 6 years' IT/cybersecurity experience.
• Minimum of 3 years' experience as an ISSO or in RMF package ownership.
• Active Top Secret clearance with SCI eligibility.
• Knowledge of RMF, NIST SP 800-37/53, and ICD 503.
• Experience with Cross Domain Solutions engineering and governance.

Responsibilities

• Create and maintain ATO packages for assigned systems in the GRC tool and monitor compliance.
• Perform self-assessments of on-premise and cloud systems against A&A SOP.
• Manage POA&Ms, waivers, and risk exceptions; provide weekly or bi-weekly reports.
• Perform audit log reviews; respond to NOSC alerts; ensure periodic scanning.
• Coordinate system changes through IATT requests; participate in CM Board as needed.
• Facilitate contingency plan tests and submit CPEM reporting.
• Deliver ISSO reports to ISSMs and system owners; mentor junior ISSOs.
• Serve as SCIF ISCR and support DoD security posture.

Skills

RMF knowledge

NIST SP 800-37/53

Cross Domain Solutions governance

DevSecOps & Agile

Strong communication

Portfolio management

Education

BS degree in IT, Cybersecurity, Information Systems, or Computer Science

Tools

RSA Archer

eMASS

Job description

Tharros, a leader in cybersecurity services, seeks an Information System Security Officer (ISSO) to independently own security postures for DHS Intelligence Enterprise systems, including cross-domain and cloud environments, per ICD 503 and DHS 4300C. On-site in a Government SCIF in Washington, DC.

You will develop ATO packages, perform RMF-related assessments, manage POA&Ms and risk exceptions, conduct audits, and report metrics to ISSMs. A TS clearance with SCI eligibility is required.