Search Jobs | Dice.com

20 results (0 new)

Group by company

ISSO Support Specialist with FEDRAMP Cloud

CyberData Technologies

Remote • 15d ago

Easy Apply

Full-time

Depends on Experience

Senior Cloud Engineer IS - Hybrid

Providence Health & Services

Redmond, Washington • 12d ago

Full-time

USD 49.36 - 84.05 per hour

Senior Cloud Engineer

QUANTUM TECHNOLOGIES LLC

Remote • 4d ago

Easy Apply

Contract

$120,000 - $140,000

Senior Cloud Engineer

Vision Talent

Remote • 3d ago

Easy Apply

Contract

65 - 70

Senior Cloud Architect

Humana Inc

Remote • 12d ago

Full-time

USD 129,300.00 - 177,800.00 per year

Senior Staff Cloud Architect

ServiceNow, Inc.

Kirkland, Washington • Today

Full-time

USD 190,900.00 - 334,100.00 per year

Cloud Analyst Solutions II/Senior Business Analyst

Zolon Tech Solutions Inc

Remote • 2d ago

Easy Apply

Contract

Depends on Experience

Senior Cloud Architect

Guild

Remote • Today

Full-time

USD 124,000.00 - 180,000.00 per year

Senior Cloud Engineer/Active clearance required

Softek International Inc.

Remote • 5d ago

Easy Apply

Full-time

100 - 120

Senior Salesforce Administrator - Service Cloud

Hims and Hers Health, Inc.

Remote • Today

Full-time

USD 120,000.00 - 155,000.00 per year

Sr. Cloud Engineer (Azure)

Eliassen Group

Remote or Almont, Colorado • Today

Full-time

USD 140,000.00 - 160,000.00 per year

Sr Cloud Architect

Alutiiq, LLC

Remote or Alabama • Today

Full-time

USD 140,000.00 - 160,000.00 per year

Senior Cloud Engineer

NEOGOV

Remote or California • Today

Full-time

Senior Systems Cloud Administrator

McKinstry Company

Seattle, Washington • Today

Full-time

USD 99,270.00 - 140,900.00 per year

Sr Cloud Engineer - ITOps

Prominent Technology

Remote • Yesterday

Easy Apply

Contract

$74

Senior Cloud ISSO

Bart & Associates, LLC

Washington • Today

Full-time

Senior ISSO

Bart & Associates, LLC

Washington • Today

Full-time

Senior Cloud Architect - Remote

ICF Consulting Group, Inc.

Remote or Reston, Virginia • Today

Full-time

USD 144,381.00 - 245,448.00 per year

Senior Cloud Engineer (Azure)

Ground Penetrating Radar Systems

Remote or Maumee, Ohio • Today

Full-time

Compensation information provided in the description

Senior Software Engineer- Cloud/GovCloud (Top Secret cleared)

ICF Consulting Group, Inc.

Washington • Today

Full-time

USD 98,614.00 - 167,644.00 per year

Job Details

Skills

ISSO
Fedramp

Summary

Title: ISSO Support Specialist with FEDRAMP Cloud
Location: Remote

The Information System Security Officer (ISSO) supports organization s information systems by managing day-to-day cybersecurity compliance, risk management, and system authorization activities. The ISSO works closely with system owners, technical teams, the cybersecurity organization, and other stakeholders to ensure assigned systems remain compliant with federal and agency s security requirements throughout their lifecycle.

The ISSO Support Specialist performs the following duties:

Serve as the primary cybersecurity/compliance point of contact for assigned HRSA systems.
Support the NIST Risk Management Framework (RMF) and system Authorization to Operate (ATO) lifecycle, including initial authorizations and ongoing authorization activities. Oversees the security posture for one or more system(s) throughout the entire lifecycle;
provides continuous monitoring through scheduled audits, controls testing, and audit reviews, and escalates issues as needed.
Oversees the implementation of information technology (IT) security controls and security authorization documents; and ensures the system is Federal Information Security Management Act (FISMA) compliant with mandated security policies and requirements.
Provides technical recommendations for all Risk Assessments and Vulnerability Assessments conducted for the system or site; and provides security analysis of IT activities to ensure that appropriate security measures are in place and being enforced. Coordinates penetration testing or other 'red team' activities that might occur at/or traverse the system s infrastructure as part of a Security Control Assessment (SCA). Promotes IT security awareness information to the user community by validating the user community is completing their annual training. Oversees and maintains regulatory requirements and participates on the Change Control Board (CCB) by reviewing system changes for security implications.
Provides general system security support to ensure a secure posture is in place for systems that support key program areas; verify that application//system security postures are implemented as stated; documents deviations by performing FISMA/NIST compliance monitoring to review results across the system environment for compliance with business processes, operations of customer organizations, and IT security guidelines and policies; and recommend required actions to correct those deviations.
Develops/updates system security plans, risk assessments, disaster recovery, and contingency plans, incident response and additional system development life-cycle (SDLC) security documentation for systems and/or applications in alignment with the SDLC.
Provides coordination, consolidation, and submission of the Authority to Operate (ATO) security documentation for CISO approval; and track security assessment and authorization (SA&A) packages, reviewing authorization documents to confirm that security requirements are compliant.
Facilitates remediation/mitigation of the POA&Ms to reduce risk and address weaknesses to the system.
Provides Continuous Monitoring support/guidance by reviewing security documentation, logs, scans and ensuring system backups are performed.
Reviews hardware/software asset inventory and ensure completion and advise system owner (SO) and management regarding gaps.
Assists the CISO and SO with security-related inquiries and issues; coordinate protective or corrective measures when an incident or vulnerability is discovered by supporting the generation of a solution and following up to ensure the incident is resolved. Identify security weaknesses and document the weaknesses in the Security Assessment Report (SAR).
Works with SOs, developers, and administrators to develop an access control or role-based model that ensures secure access to the system/application; and implement processes to control, enforce, and monitor access and privileges which lead to securing the systems and information.
Reviews system changes for security implications; conduct security impact assessments when system changes or additions occur to the system, evaluate compliance with IT security requirements, compare them with expected results, and make recommendations to system owners.
Analyzes and supports security control assessments by verifying results with the organization s IS/IA requirements and confirms that the level of risk is within acceptable limits.
Analyzes the effectiveness of the system security safeguards (examining for full compliance against requirements) to ensure they demonstrate the intended level of protection and functionality and advise or inform SO and leadership on risks to the security posture.
Develops security risk assessment; Advise SO on requirements in alignment with security risk assessment results, thereby supporting IT FISMA compliance across multiple systems/applications.
Develops disaster recovery and contingency plans for systems and/or applications to reduce system risk.
Provides operational risk management support which involves participating in risk assessments, managing system weaknesses, and providing ongoing risk monitoring, threat management and mitigation support.
Evaluates and provides input into the risk and adequacy of security measures proposed or provided in response to system acquisitions.
Performs risk assessments, as required by the client.
Reviews threat and vulnerability assessment findings to quantify and prioritize vulnerabilities in a system.
Serves as IT security subject matter expert (SME)/POC for customer interactions and communications.
Coordinates across teams to ensure compliance with policies and alignment with the Risk Management Framework (RMF) and HHS or Operating Division policies, procedures, and guidance; and manage delivery risks/logical escalation related to delivery requirements.
Additional Requirement: must have FEDRAMP experience with cloud-based systems.

Desired Background

Candidates should have hands-on experience supporting federal cybersecurity programs, particularly FISMA, NIST RMF, NIST SP 800-53 security controls, ATOs, POA&Ms, security assessments, and continuous monitoring. Experience working with federal eGRC platforms such as Archer and familiarity with vulnerability management and cloud environments such as AWS or Azure are strongly preferred.
The ideal candidate is not simply a documentation-focused ISSO. We are looking for someone who can understand technical security issues, work effectively with engineers and system owners, identify and communicate risk, and actively drive security and compliance issues through resolution.

Employers have access to artificial intelligence language tools (“AI”) that help generate and enhance job descriptions and AI may have been used to create this description. The position description has been reviewed for accuracy and Dice believes it to correctly reflect the job opportunity.

Dice Id: RTX146efa
Position Id: 9077326
Posted 15 days ago

Fitment

Dice Job Match Score™

To see how well you match this job, please log in or create an account.

Once logged in, be sure to complete your profile to get the most accurate match score.

Contact the job poster

Qasar Qureshi

Recruiter @ CyberData Technologies

View Profile

Create job alert

Never miss an opportunity! Create an alert based on the job you applied for.

Remote or Alexandria, Virginia

•

Today

SBG Technology Solutions, Inc. (SBG), a DSS, Inc. company, offers IT Governance, Systems Engineering, Enterprise Modernization, Artificial Intelligence, and Cyber Security innovation to federal and commercial clients nationwide. Overview The Cybersecurity Specialist ensures all applications meet FedRAMP High security and compliance requirements throughout the assessment and onboarding process for DSS Health Cloud, a FedRAMP High authorized healthcare-focused platform hosted in an AWS Government

Full-time

USD 130,000.00 - 150,000.00 per year

Cybersecurity Engineer (FedRAMP) (US Remote)

Remote or Illinois

•

Today

Company Overview At Motorola Solutions, we believe that everything starts with our people. We're a global close-knit community, united by the relentless pursuit to help keep people safer everywhere. We build and connect technologies to help protect people, property and places. Our solutions foster the collaboration that's critical for safer communities, safer schools, safer hospitals, safer businesses, and ultimately, safer nations. Connect with a career that matters, and help us build a safer

Full-time

USD 90,000.00 - 100,000.00 per year

Security Compliance Analyst

Remote

•

Yesterday

Who we are: ShorePoint is a fast-growing, industry-recognized and award-winning cybersecurity services firm focused on high-profile, high-threat public and private sector customers who demand experience and proven security models to protect their data. We embrace a work hard, play hard mentality and celebrate individual and company successes. We are passionate about our mission and going above and beyond to deliver for our customers, while fostering an environment that supports creativity, accou

Full-time

Depends on Experience

Information Systems Security Manager

Remote

•

Today

Overview The Information Systems Security Manager (ISSM), FedRAMP is responsible for overseeing and sustaining the security authorization and continuous compliance of cloud-based information systems supporting United States Federal Government customers. This role is accountable for ensuring the confidentiality, integrity, availability, privacy, auditability, and accountability of government information systems and associated data. The ISSM partners closely with Business Operations, Engineering,

Full-time

USD 135,000.00 - 155,000.00 per year