Information Systems Security Officer
Core
Support a Department of War (DOW) agency in a contractor environment for cybersecurity and risk management by ensuring information systems comply with DOW cybersecurity requirements and authorization standards.
Role type
Information Systems Security Officer (ISSO)
Builds
Secure DOW information systems and maintain compliance with federal and DOW policies
Domain
Federal Government Contracting / Cybersecurity / Risk Management
Required skills
Risk Management Framework (RMF) lifecycle support, System security authorization and accreditation, Continuous monitoring program management, Access control and identity management, Vulnerability assessment and remediation coordination, Security compliance reporting, User provisioning and access reviews, Security control validation, Plan of Action & Milestones (POA&M) management, DOW cybersecurity policy knowledge
Preferred skills
NIST SP 800-37 expertise, DOW Cloud Computing Security Requirements Guide (CCSRG) knowledge, RBAC and Privileged Access Management experience
Technologies
RMF, NIST SP 800-37, DOW Cybersecurity Frameworks, CCSRG, RBAC, IAM tools, Continuous Monitoring Dashboards
Responsibilities
Support system categorization and conduct cybersecurity risk assessments, Assist with RMF lifecycle implementation and execution, Support system accreditation and security authorization activities, Ensure compliance with DOW cybersecurity policies and standards, Monitor information systems and support continuous monitoring activities, Manage user provisioning, deprovisioning, and periodic access reviews, Track and coordinate remediation of security vulnerabilities, Collaborate with system owners and Authorizing Officials, Support security assessments, audits, and compliance reviews, Maintain security documentation and artifacts, Develop reports and metrics on cybersecurity compliance
Seniority
Mid-Senior level, hands-on IC
