Senior RMF/ATO Security Officer (ISSO)

CGS Federal; Tampa (FL); Presencial; USD 110.000 - 160.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Health, Dental, and Vision

Life Insurance

401k

Flexible Spending Account (FSA)

Paid Time Off

Descripción de la vacante

CGS Federal is seeking an Information Systems Security Officer (ISSO) to support DoC systems from a client site in Washington, DC, guiding DIACAP-to-RMF migration and the full A&A lifecycle. You will perform security assessments, risk management, and policy documentation to help achieve Authorization to Operate.

The ideal candidate has 5+ years in IA/ISSO roles, eMASS experience, vulnerability management tooling familiarity (HBSS/ACAS), and relevant certifications.

Formación

• Five+ years of IA/ISSO/IE/ATO package development experience.
• Experience generating security documentation and assessments per DoC RMF/NIST 800-53.
• Proficient with eMASS and security control documentation.
• Certifications such as CCNA Security, CySA+, GICSP, GSEC, Security+ CE, SSCP or higher.
• Strong writing and documentation skills for security policies and procedures.

Responsabilidades

• Review systems to identify security weaknesses and recommend remediation.
• Maintain organizational cybersecurity risk management and risk registry.
• Provide RMF-based guidance and validation with NIST/DoC policies.
• Coordinate CM changes with ISSM, SCA, and AO and document outcomes.
• Oversee vulnerability management (HBSS/ACAS) and patch processes.
• Support A&A activities, transitioning from DIACAP to DoC RMF.

Conocimientos

Security risk mgmt

NIST RMF

DIACAP to RMF

Vulnerability scanning

Policy writing

Coordination with ISSM

Educación

Bachelor’s Degree

Herramientas

eMASS

HBSS

ACAS

Microsoft Word

Microsoft Excel

Descripción del empleo

CGS Federal is seeking an Information Systems Security Officer (ISSO) to support DoC systems from a client site in Washington, DC, guiding DIACAP-to-RMF migration and the full A&A lifecycle. You will perform security assessments, risk management, and policy documentation to help achieve Authorization to Operate.

The ideal candidate has 5+ years in IA/ISSO roles, eMASS experience, vulnerability management tooling familiarity (HBSS/ACAS), and relevant certifications.