Senior ISSO — DoD RMF, STIGs & Risk Management

American Systems; Virginia (MN); Hybrid; USD 133,000 - 165,000; Full time

Job summary

AMERICAN SYSTEMS is a leading employee-owned federal government contractor supporting national priority programs in IT, accreditation, RMF, and security operations. This role as an Information Systems Security Officer (ISSO) spans advisory duties, RMF compliance, vulnerability management, and EOL/EOSL tracking.

Qualified candidates hold an active TS clearance with SAP eligibility, a Bachelor's degree, 8–10 years of DoD/IC security experience, and a current IAT III certification such as CISSP or

Qualifications

• Active TS clearance with SAP eligibility.
• 8-10 years of DoD/IC security experience.
• Bachelor's degree in a relevant field.
• Current DOD IAT Level III certification: CASP+ CE, CCNP Security, CISA, CISSP (or Associate), GCED, or GCIH.

Responsibilities

• Serve as principal advisor to the Information System Owner.
• Review and develop IS accreditation/support documentation.
• Maintain RMF standards and Configuration Management.
• Perform STIGS/SCAP on the network, self inspections, and remediation actions.
• Assess vulnerability and risk management.
• Create and maintain system A&A policies.
• Create/update SOPs and plans including PO&AMs, Continuous Monitoring, SSPs, and Incident Responses.
• Performaudits (Weekly, Monthly and Quarterly) to identify vulnerabilities and implement countermeasures.
• Maintain IS security records and advise/prepare Co-Utilization Agreements.
• Track EOL/EOSL for software and hardware.
• Provide security coordination/reviews on system test plans.
• Attend IPT meetings.

Skills

TS clearance

Security experience

Executive briefing

Analytical mindset

Education

Bachelor's degree

Tools

ACAS

SCAP

STIG Viewer

Job description

AMERICAN SYSTEMS is a leading employee-owned federal government contractor supporting national priority programs in IT, accreditation, RMF, and security operations. This role as an Information Systems Security Officer (ISSO) spans advisory duties, RMF compliance, vulnerability management, and EOL/EOSL tracking.

Qualified candidates hold an active TS clearance with SAP eligibility, a Bachelor's degree, 8–10 years of DoD/IC security experience, and a current IAT III certification such as CISSP or