Sr. Information Systems Security Officer (ISSO)

CGS Federal (Contact Government Services); St. Louis (MO); On-site; USD 80,000 - 110,000; Full time

Job summary

An established industry player is seeking a skilled Information Systems Security Officer to ensure compliance and security of critical systems. This full-time role involves managing assessments, overseeing security activities, and guiding the transition to RMF compliance. The ideal candidate will have extensive experience in security documentation and relevant certifications. Join a collaborative environment that values diversity and offers professional growth opportunities. If you are passionate about cybersecurity and ready to make a difference, this position is perfect for you.

Benefits

Comprehensive benefits package

Opportunities for professional growth

Collaborative work environment

Qualifications

• 5+ years of experience in security documentation and compliance.
• Professional security certifications such as CCNA Security or Security+ CE.

Responsibilities

• Conducting security assessments and managing cybersecurity risks.
• Supporting security authorization activities and policy development.

Skills

DIACAP

RMF

NIST 800.53

cybersecurity risk management

vulnerability scanning

Education

Bachelor's Degree

Master's Degree in Cybersecurity

Tools

eMASS

Job description

Sr. Information Systems Security Officer (ISSO)

CGS Federal (Contact Government Services) is seeking an experienced Information Systems Security Officer (ISSO) with expertise in DIACAP and/or RMF to support Department of Commerce systems in achieving Authorization to Operate (ATO). This full-time position is located at the Herbert Hoover building in Washington, DC, and involves managing the full lifecycle of Assessment and Authorization (A&A) activities in accordance with NIST 800.53 and RMF requirements.

The role includes conducting security assessments, overseeing information system security activities, and supporting security authorization processes, including transitioning from DIACAP to RMF compliance. The ideal candidate will have at least five years of experience in security documentation, security assessment, and compliance, along with relevant certifications such as CCNA Security, CySA+, GICSP, GSEC, or Security+ CE.

Key responsibilities include:

1. Reviewing systems for security weaknesses and recommending improvements.
2. Managing cybersecurity risks and maintaining risk registries.
3. Providing security guidance based on NIST RMF, DoC policies, and local security standards.
4. Supporting vulnerability scanning and patch management activities.
5. Assisting with security authorization activities and policy development.
6. Researching and preparing risk assessment reports and mitigation strategies.

Qualifications include a Bachelor's Degree, extensive experience in security assessment and documentation, eMASS experience, and professional security certifications. Preferred qualifications include a Master’s Degree in Cybersecurity and certifications like CISSP or CASP.

CGS offers a comprehensive benefits package, a collaborative work environment, and opportunities for professional growth. We are an Equal Opportunity Employer committed to diversity and inclusion.