Senior ISSO & Cyber Risk Leader (FISMA)

Steampunk, Inc.; McLean (VA); On-site; USD 120,000 - 145,000; Full time

Job summary

Steampunk, Inc. seeks a Principal Information System Security Officer to sustain and enhance the security posture for a government client in the DMV.

The role demands initiative, organization, and the ability to communicate decisively across the organization while safeguarding sensitive information. Responsibilities include monitoring POA&Ms, risk memos, annual DHS assessments, security authorization reviews, contingency testing, audits, and ensuring secure development within DevOps/Agile

Qualifications

• Bachelor’s Degree with 8 years of cybersecurity experience; FISMA-related.
• No degree and 12 years of cybersecurity experience; 10 of which must be FISMA-related.
• Master’s Degree in IT field and 6 years of cybersecurity experience; FISMA-related.
• Must possess one of the following certifications: CISSP, CASP, CISA, CISM, SSCP, GISP, GSLC.
• Specialized knowledge of NIST SP 800 RMF and information security controls.
• Experience leading ISSO teams and DHS cloud/DevOps environments preferred.

Responsibilities

• Proactively create, monitor and update POA&Ms to ensure weaknesses are resolved on schedule.
• Create Waivers or Risk Acceptance Memos to manage system risks.
• Conduct annual assessment per DHS Information Security Performance Plan.
• Review and update security authorization documents at least annually.
• Conduct Contingency Plan tests at least annually and update the plan.
• Perform system self-assessments as part of Ongoing Authorization program.
• Monitor ISVM/Patch Management and respond as needed.
• Provide audit support for assigned systems throughout audits (Pre, During, Post).
• Coordinate with Privacy, Records, and Information Governance divisions for compliance.
• Ensure security requirements are included in development cycles (Waterfall, Agile, SecDevOps).

Skills

ISSO leadership

FISMA knowledge

NIST RMF

Vulnerability assessment

Cloud security

Education

Bachelor’s Degree and 8 years of cybersecurity experience; FISMA-related

No degree and 12 years of cybersecurity experience; 10 of which must be FISMA-related

Master’s Degree in IT field and 6 years of cybersecurity experience; FISMA-related

Job description

Steampunk, Inc. seeks a Principal Information System Security Officer to sustain and enhance the security posture for a government client in the DMV.

The role demands initiative, organization, and the ability to communicate decisively across the organization while safeguarding sensitive information. Responsibilities include monitoring POA&Ms, risk memos, annual DHS assessments, security authorization reviews, contingency testing, audits, and ensuring secure development within DevOps/Agile