ISSO: Lead Information Security & Compliance

PLEXSYS; Washington; On-site; USD 90,000 - 141,000; Full time

Job summary

PLEXSYS in the United States is seeking an Information System Security Officer (ISSO) to oversee the security posture of assigned information systems. The ISSO collaborates with the ISSM, CPSO, and FSO to implement RMF, JSIG, and NIST 800-53 controls, ensuring secure operations across locations.

You will prepare and maintain security authorization packages, manage changes, and conduct periodic reviews, patching, AV updates, and continuous monitoring.

Responsibilities

• Lead the information system security program for their assigned location to include implementation and validation of automated informational security, ensuring security requirements as contracted are satisfied
• Maintain and establish the accreditation of classified information systems
• Establish and implement security procedures and practices in support of Corporate goals and current DoD Regulations
• Ensure all security procedures are being followed such as patching, AV updates, continuous monitoring, trainings, and self-inspections
• Develop, implement and maintain security emergency action plans
• Provide security education and training to local employees
• Maintain administrative security records and documents for local employees
• Conduct self-inspections to ensure current security measures and policies are effective
• Conduct random security inspections to ensure regulations and procedures are being adhered to by local employees
• Conduct system audits in accordance with security accreditation package requirements
• Conduct vulnerability scans and analysis

Job description

PLEXSYS in the United States is seeking an Information System Security Officer (ISSO) to oversee the security posture of assigned information systems. The ISSO collaborates with the ISSM, CPSO, and FSO to implement RMF, JSIG, and NIST 800-53 controls, ensuring secure operations across locations.

You will prepare and maintain security authorization packages, manage changes, and conduct periodic reviews, patching, AV updates, and continuous monitoring.