ISSO: RMF A&A Expert for DoC Systems

Cgsfederal; Washington (District of Columbia); On-site; USD 95,000 - 150,000; Full time

Benefits offered by this job

Health, Dental, and Vision

Life Insurance

401k

Flexible Spending Account (HSA/CFSA/FC

Paid Time Off and Holidays

Job summary

CGS is seeking an Information Systems Security Officer (ISSO) with RMF/DIACAP experience to support Department of Commerce systems and achieve Authorization to Operate (ATO). The role is on-site at the Herbert Hoover building in Washington, DC, handling full life-cycle RMF A&A and security oversight for DoC systems.

The ISSO will work with DoC policies, NIST 800-53, and risk management processes, including vulnerability management and DIACAP transition activities, to ensure compliance and secure

Qualifications

• Bachelor's degree required.
• Minimum of five years as IA Analyst/ISSE/ISSO in ATO package development.
• eMASS experience.
• Security certifications such as CCNA Security, CySA+, GICSP, GSEC, CompTIA Security+ CE, SSCP, or higher.
• Strong desktop publishing skills using Word and Excel.
• Ability to multi-task in a deadline-oriented environment.

Responsibilities

• Review systems to identify vulnerabilities and document upgrades.
• Maintain responsibility for managing cybersecurity risk.
• Identify risks, prioritize, and present to leadership.
• Provide guidance and validation using NIST RMF, DoC policies.
• Recommend CM changes and coordinate with ISSM/SCA/AO.
• Maintain vulnerability scanning tool compliance and patch management.

Skills

Technical writing

Documentation

Multitasking

Education

Bachelor's Degree

Tools

eMASS

Microsoft Word

Microsoft Excel

Job description

CGS is seeking an Information Systems Security Officer (ISSO) with RMF/DIACAP experience to support Department of Commerce systems and achieve Authorization to Operate (ATO). The role is on-site at the Herbert Hoover building in Washington, DC, handling full life-cycle RMF A&A and security oversight for DoC systems.

The ISSO will work with DoC policies, NIST 800-53, and risk management processes, including vulnerability management and DIACAP transition activities, to ensure compliance and secure