Information Systems Security Officer (ISSO)

CGS is seeking an Information Systems Security Officer (ISSO) with DIACAP and/or RMF experience who has deep expertise in security assessment documentation to support Dept. of Commerce systems and efforts to achieve their Authorization to Operate (ATO). The ISSO will conduct security assessment, and information system security oversight activities in accordance with NIST 800.53 that support systems from the perspective RMF requirements.

Requirements

• Review systems to identify potential security weaknesses and recommend improvements
• Maintain responsibility for managing cybersecurity risk from an organizational perspective
• Identify organizational risks, prioritize those risks, and maintain a risk registry
• Provide security guidance and IS validation using NIST RMF, DoC, and local security policies
• Maintain vulnerability scanning tool compliance and patch management
• Support security authorization activities and provide subject matter expertise for cyber security and trusted system technology
• Apply advanced technical knowledge and analysis to develop solutions to complex problems
• Conduct research and write risk assessment reports and provide expert technical guidance for mitigation strategies

Benefits

• Health, Dental, and Vision
• Life Insurance
• 401k
• Flexible Spending Account
• Paid Time Off and Observance of State/Federal Holidays