Sr. Information Systems Security Officer (ISSO)

CGS Federal (Contact Government Services); St. Louis (MO); On-site; USD 80,000 - 120,000; Full time

Job summary

A leading company is seeking a Sr. Information Systems Security Officer (ISSO) to support the Department of Commerce's systems within a collaborative environment. You'll manage security assessments, ensure compliance with NIST standards, and lead various risk management activities. Ideal candidates have significant experience in cybersecurity and hold relevant certifications.

Benefits

Health insurance

Dental insurance

Vision insurance

Life insurance

401k

FSA

Paid time off

Holidays

Qualifications

• Minimum 5 years in Information Assurance or equivalent roles.
• Experience in developing ATO packages and managing security assessments.
• Professional security certifications (CCNA Security, CySA+, etc.)

Responsibilities

• Conduct security assessments and provide recommendations for improvements.
• Manage cybersecurity risks and document them for leadership.
• Support security authorization activities transitioning from DIACAP to RMF.

Skills

Analytical Skills

NIST RMF

Risk Management

Cybersecurity Expertise

Configuration Management

Education

Bachelor's Degree

Master’s Degree in Cybersecurity or related field

Tools

eMASS

Microsoft Word

Microsoft Excel

Job description

Sr. Information Systems Security Officer (ISSO)

CGS Federal is seeking an experienced Information Systems Security Officer (ISSO) with expertise in DIACAP and/or RMF, focusing on security assessment documentation to support Department of Commerce systems and achieve their Authorization to Operate (ATO). The position is located at the Herbert Hoover building in Washington, DC, and involves full lifecycle Assessment and Authorization (A&A) management through all 6 steps of the RMF process, supporting the Government ISSM.

The role includes conducting security assessments and oversight activities in accordance with NIST 800.53, from the perspective of RMF requirements.

CGS offers a collaborative environment that encourages professional growth through various learning opportunities, aiming to solve dynamic government problems with innovative technology.

Responsibilities include:

• Review systems for potential security weaknesses and recommend improvements
• Manage cybersecurity risk at an organizational level
• Identify, prioritize, and document risks for senior leadership
• Provide security guidance using NIST RMF, DoC policies, and local security policies
• Recommend configuration management for security software, hardware, and firmware, coordinating changes with relevant officials
• Maintain compliance with vulnerability scanning tools like HBSS or ACAS and patch management systems like IAVM
• Support security authorization activities, including transitioning from DIACAP to RMF
• Provide expertise in cybersecurity and trusted system technology
• Research, write, review, and finalize security assessments, policies, and reports
• Conduct risk assessments and provide mitigation strategies

Qualifications:

• Bachelor’s Degree
• At least 5 years of experience in roles such as IA Analyst, ISSE, ISSO, with experience in ATO package development
• Experience with eMASS
• Professional security certifications such as CCNA Security, CySA+, GICSP, GSEC, Security+, SSCP or higher
• Strong skills in Microsoft Word and Excel
• Ability to multi-task in a deadline-driven environment

Preferred:

• CISSP, CASP, or similar certification
• Master’s Degree in Cybersecurity or related field
• Strong organizational and analytical skills
• Ability to work independently and in teams
• High work ethic and commitment to quality

CGS is committed to fostering an inclusive environment and is an Equal Opportunity Employer. Benefits include health, dental, vision, life insurance, 401k, FSA, paid time off, and holidays.