Information System Security Officer (ISSO)

This role is critical in ensuring the security posture of mission-critical applications and infrastructure across multiple network enclaves (Unclassified, Secret, Top Secret). The ISSO will be responsible for developing, maintaining, and enforcing security policies, implementing cybersecurity controls, managing Authority to Operate (ATO) documentation, and conducting continuous monitoring and risk assessments in compliance with FISMA, NIST, DOJ, and other federal mandates.

Requirements

• Serve as the principal cybersecurity advisor to system owners and stakeholders.
• Design, analyze, and test of information security systems, products, cloud architectures and cloud solutions.
• Develop, implement, and evaluate security controls, measures, and frameworks in cloud-based systems to ensure data integrity, confidentiality, and availability.
• Perform risk analysis, vulnerability assessments, and security audits to identify and address potential weaknesses in cloud environments.
• Follow all appropriate security authorization process for requesting and maintaining an Authority to Operate (ATO).
• Responsible for ensuring operational security is maintained for assigned information systems.
• Ensure systems are operated, maintained, disposed of in accordance with security policies and practices.
• Perform Security Incident Reporting and Response.
• Coordinate with the Office of the Chief Information Officer (OCIO), Security Division, and others to provide documentation to the system Certification and Accreditation process.
• Ensure audits and reviews are responded to with accurate information.
• Perform system access control responsibilities.
• Participate in the change management process for assigned applications.
• Work with Product Owner, Product Manager, OCIO, Security Division, and other stakeholders to ensure security concerns are addressed during all phases of system lifecycle.
• Perform continuous system security monitoring.
• Implement and manage cloud-native and third-party security tools for monitoring, threat detection and vulnerability management.
• Act as a SME on Cloud Security while applying methods, standards, and approaches for ensuring the baseline security safeguards are appropriately implemented and documented.
• Provides reports to superiors regarding effectiveness of data security and makes recommendations for the adoption of new procedures.
• Draft and keep updated information security documentation to include System Security Plan, Information System Contingency Plan, Plan of Actions and Milestones (POA&M), Privacy Threat Assessment, Privacy Impact Assessment, and Configuration Management Plan.
• Responsible for ensuring the implementation and maintenance of annual security controls assessments.
• Assist with FISMA System audits as necessary.

Benefits

• Competitive salary
• Benefits package
• Opportunities for professional growth and development