Description:
The Information Systems Security Officer (ISSO) serves as the primary liaison between the system owner and the Information Systems Security Manager (ISSM). The ISSO is responsible for maintaining the appropriate operational security posture for assigned information systems and ensuring compliance with Federal Information Security Management Act (FISMA) requirements and Department security policies.
Responsibilities Include, But Are Not Limited To
- Implement and maintain security controls for assigned information systems in accordance with NIST SP 800-53 and Department of Justice security standards
- Conduct continuous monitoring activities and coordinate security assessments
- Manage the Risk Management Framework (RMF) process, including system categorization, security control selection, implementation, assessment, authorization, and continuous monitoring
- Prepare and maintain System Security Plans (SSPs), Plans of Action and Milestones (POA&Ms), and other security documentation
- Coordinate incident response activities and ensure timely reporting of security incidents
- Conduct security awareness training for system users
- Review and approve system changes for security impact
- Serve as technical advisor to system owners on security matters, providing
- understanding of RMF, FISMA compliance, and federal security frameworks, and information security principles and practices
What You Will Need
- Bachelor’s degree in computer science, Information Technology, Cybersecurity, or related field
- Active Top Secret clearance with SCI eligibility
- Minimum of SIX (6) years of experience in cybersecurity with THREE (3) in ISSO/RMF roles
- Strong understanding of security frameworks and compliance standards (e.g., NIST, RMF SP 800-53 Rev 5, DoD 8570).
- Current Security+ certification (or equivalent DoD 8570 IAT Level II certification
What Would Be Nice To Have
- Master’s Degree in in computer science, Information Technology, Cybersecurity, or related field
- Certified Information Systems Security Professional (CISSP)
- Knowledge of cloud security (FedRAMP)
- Experience with security Tools (ACAS/Nessus, Splunk, etc.)
- Project management experience