Search Jobs | Dice.com

16 results (0 new)

Group by company

ISSO Support Specialist with FEDRAMP Cloud

CyberData Technologies

Remote • 15d ago

Easy Apply

Full-time

Depends on Experience

Offshore Sr. GRC Analyst / Sr. ISSO (Information System Security Officer) Consultant | CMMC

IBSS Corp.

Remote or Silver Spring, Maryland • Today

Full-time

USD 3,000.00 per month

Senior Information Systems Security Officer (ISSO)

Keeper Security, Inc.

Remote • Today

Full-time

Information System Security Officer (ISSO)

Gridiron IT Solutions

Remote • 16d ago

Easy Apply

Full-time

$100,000 - $140,000

Lead Senior Information System Security Officer

CACI International, Inc.

Washington • 8d ago

Full-time

USD 90,300.00 - 189,600.00 per year

Senior Information System Security Officer

CACI International, Inc.

Washington • Today

Full-time

USD 120,800.00 - 265,800.00 per year

Senior ISSO

Bart & Associates, LLC

Washington • Today

Full-time

Senior Cloud ISSO

Bart & Associates, LLC

Washington • Today

Full-time

Traveling Information Systems Security Officer (ISSO)

CAE USA Inc.

Washington • Today

Full-time

Information System Security Officer (ISSO)

AnaVation LLC

Washington • Today

Full-time

USD 85,933.19 - 202,292.42 per year

Information Systems Security Manager (ISSM)

Aalyria

Remote • Today

Full-time

USD 165,000.00 - 190,000.00 per year

LEAD INFORMATION SECURITY ENGINEER (ISSO with Post-Quantum Cryptography)

Lumen

Remote • Today

Full-time

USD 105,786.00 - 141,047.00 per year

Information Systems Security Officer (ISSO)

CACI International, Inc.

Remote • Today

Full-time

USD 75,200.00 - 158,100.00 per year

Cyber Analyst - ISSO

PeopleTec, Inc.

Remote or Elizabeth City, North Carolina • Today

Full-time

Information System Security Officer (ISSO)

CACI International, Inc.

Washington • Today

Full-time

USD 103,800.00 - 218,100.00 per year

Information System Security Officer - (ISSO)

Envisioneering, Inc

Washington • Today

Full-time

USD 100,000.00 - 180,000.00 per year

Job Details

Skills

ISSO
Fedramp

Summary

Title: ISSO Support Specialist with FEDRAMP Cloud
Location: Remote

The Information System Security Officer (ISSO) supports organization s information systems by managing day-to-day cybersecurity compliance, risk management, and system authorization activities. The ISSO works closely with system owners, technical teams, the cybersecurity organization, and other stakeholders to ensure assigned systems remain compliant with federal and agency s security requirements throughout their lifecycle.

The ISSO Support Specialist performs the following duties:

Serve as the primary cybersecurity/compliance point of contact for assigned HRSA systems.
Support the NIST Risk Management Framework (RMF) and system Authorization to Operate (ATO) lifecycle, including initial authorizations and ongoing authorization activities. Oversees the security posture for one or more system(s) throughout the entire lifecycle;
provides continuous monitoring through scheduled audits, controls testing, and audit reviews, and escalates issues as needed.
Oversees the implementation of information technology (IT) security controls and security authorization documents; and ensures the system is Federal Information Security Management Act (FISMA) compliant with mandated security policies and requirements.
Provides technical recommendations for all Risk Assessments and Vulnerability Assessments conducted for the system or site; and provides security analysis of IT activities to ensure that appropriate security measures are in place and being enforced. Coordinates penetration testing or other 'red team' activities that might occur at/or traverse the system s infrastructure as part of a Security Control Assessment (SCA). Promotes IT security awareness information to the user community by validating the user community is completing their annual training. Oversees and maintains regulatory requirements and participates on the Change Control Board (CCB) by reviewing system changes for security implications.
Provides general system security support to ensure a secure posture is in place for systems that support key program areas; verify that application//system security postures are implemented as stated; documents deviations by performing FISMA/NIST compliance monitoring to review results across the system environment for compliance with business processes, operations of customer organizations, and IT security guidelines and policies; and recommend required actions to correct those deviations.
Develops/updates system security plans, risk assessments, disaster recovery, and contingency plans, incident response and additional system development life-cycle (SDLC) security documentation for systems and/or applications in alignment with the SDLC.
Provides coordination, consolidation, and submission of the Authority to Operate (ATO) security documentation for CISO approval; and track security assessment and authorization (SA&A) packages, reviewing authorization documents to confirm that security requirements are compliant.
Facilitates remediation/mitigation of the POA&Ms to reduce risk and address weaknesses to the system.
Provides Continuous Monitoring support/guidance by reviewing security documentation, logs, scans and ensuring system backups are performed.
Reviews hardware/software asset inventory and ensure completion and advise system owner (SO) and management regarding gaps.
Assists the CISO and SO with security-related inquiries and issues; coordinate protective or corrective measures when an incident or vulnerability is discovered by supporting the generation of a solution and following up to ensure the incident is resolved. Identify security weaknesses and document the weaknesses in the Security Assessment Report (SAR).
Works with SOs, developers, and administrators to develop an access control or role-based model that ensures secure access to the system/application; and implement processes to control, enforce, and monitor access and privileges which lead to securing the systems and information.
Reviews system changes for security implications; conduct security impact assessments when system changes or additions occur to the system, evaluate compliance with IT security requirements, compare them with expected results, and make recommendations to system owners.
Analyzes and supports security control assessments by verifying results with the organization s IS/IA requirements and confirms that the level of risk is within acceptable limits.
Analyzes the effectiveness of the system security safeguards (examining for full compliance against requirements) to ensure they demonstrate the intended level of protection and functionality and advise or inform SO and leadership on risks to the security posture.
Develops security risk assessment; Advise SO on requirements in alignment with security risk assessment results, thereby supporting IT FISMA compliance across multiple systems/applications.
Develops disaster recovery and contingency plans for systems and/or applications to reduce system risk.
Provides operational risk management support which involves participating in risk assessments, managing system weaknesses, and providing ongoing risk monitoring, threat management and mitigation support.
Evaluates and provides input into the risk and adequacy of security measures proposed or provided in response to system acquisitions.
Performs risk assessments, as required by the client.
Reviews threat and vulnerability assessment findings to quantify and prioritize vulnerabilities in a system.
Serves as IT security subject matter expert (SME)/POC for customer interactions and communications.
Coordinates across teams to ensure compliance with policies and alignment with the Risk Management Framework (RMF) and HHS or Operating Division policies, procedures, and guidance; and manage delivery risks/logical escalation related to delivery requirements.
Additional Requirement: must have FEDRAMP experience with cloud-based systems.

Desired Background

Candidates should have hands-on experience supporting federal cybersecurity programs, particularly FISMA, NIST RMF, NIST SP 800-53 security controls, ATOs, POA&Ms, security assessments, and continuous monitoring. Experience working with federal eGRC platforms such as Archer and familiarity with vulnerability management and cloud environments such as AWS or Azure are strongly preferred.
The ideal candidate is not simply a documentation-focused ISSO. We are looking for someone who can understand technical security issues, work effectively with engineers and system owners, identify and communicate risk, and actively drive security and compliance issues through resolution.

Employers have access to artificial intelligence language tools (“AI”) that help generate and enhance job descriptions and AI may have been used to create this description. The position description has been reviewed for accuracy and Dice believes it to correctly reflect the job opportunity.

Dice Id: RTX146efa
Position Id: 9077326
Posted 15 days ago

Fitment

Dice Job Match Score™

To see how well you match this job, please log in or create an account.

Once logged in, be sure to complete your profile to get the most accurate match score.

Contact the job poster

Qasar Qureshi

Recruiter @ CyberData Technologies

View Profile

Create job alert

Never miss an opportunity! Create an alert based on the job you applied for.

Remote or Alexandria, Virginia

•

Today

SBG Technology Solutions, Inc. (SBG), a DSS, Inc. company, offers IT Governance, Systems Engineering, Enterprise Modernization, Artificial Intelligence, and Cyber Security innovation to federal and commercial clients nationwide. Overview The Cybersecurity Specialist ensures all applications meet FedRAMP High security and compliance requirements throughout the assessment and onboarding process for DSS Health Cloud, a FedRAMP High authorized healthcare-focused platform hosted in an AWS Government

Full-time

USD 130,000.00 - 150,000.00 per year

Cybersecurity Engineer (FedRAMP) (US Remote)

Remote or Illinois

•

Today

Company Overview At Motorola Solutions, we believe that everything starts with our people. We're a global close-knit community, united by the relentless pursuit to help keep people safer everywhere. We build and connect technologies to help protect people, property and places. Our solutions foster the collaboration that's critical for safer communities, safer schools, safer hospitals, safer businesses, and ultimately, safer nations. Connect with a career that matters, and help us build a safer

Full-time

USD 90,000.00 - 100,000.00 per year

Security Compliance Analyst

Remote

•

Yesterday

Who we are: ShorePoint is a fast-growing, industry-recognized and award-winning cybersecurity services firm focused on high-profile, high-threat public and private sector customers who demand experience and proven security models to protect their data. We embrace a work hard, play hard mentality and celebrate individual and company successes. We are passionate about our mission and going above and beyond to deliver for our customers, while fostering an environment that supports creativity, accou

Full-time

Depends on Experience

Information Systems Security Manager

Remote

•

Today

Overview The Information Systems Security Manager (ISSM), FedRAMP is responsible for overseeing and sustaining the security authorization and continuous compliance of cloud-based information systems supporting United States Federal Government customers. This role is accountable for ensuring the confidentiality, integrity, availability, privacy, auditability, and accountability of government information systems and associated data. The ISSM partners closely with Business Operations, Engineering,

Full-time

USD 135,000.00 - 155,000.00 per year