Senior Information Systems Security Officer (ISSO)

MDC Corporation
Washington, DC, United States
3 months ago

Role details

Contract type
Permanent contract
Employment type
Full-time (> 32 hours)
Experience level
Expert
Experience required
6 years minimum
Compensation
$80,000.0
Working hours
Regular working hours
Job source

Tech stack

Cyber Security Software Vulnerability Management Information Technology

Job description

Serve as the primary security point of contact for assigned federal systems, maintaining authorization posture, supporting POA&M remediation, coordinating continuous monitoring, and updating security documentation., · Maintain SSPP/SSP, POA&M, risk assessment, contingency plan, incident response plan, and supporting artifacts.

· Coordinate system-level continuous monitoring, vulnerability remediation, and security status reporting.

· Support ATO package updates after system changes, incidents, or control assessment findings.

Requirements

Do you have experience in Security Authorization?, Do you have a Bachelor’s degree?, · 7+ years cybersecurity experience.

· 6+ years developing, maintaining, or assessing SA&A/ATO packages for IT systems.

· Strong knowledge of NIST SP 800-37, NIST SP 800-53, FISMA, POA&M lifecycle management, and continuous monitoring.

· Bachelor degree and at least one of: CISSP, CAP/CGRC, CISA, or CRISC.

Preferred Qualifications

· Experience with JCAM or similar federal A&A tool.

· Experience supporting systems with PII, CUI, cloud, or hybrid environments., * Do you hold at least two of the following certifications: CISSP, CAP/CGRC, CISA, CRISC, CISM, or CGEIT? Please list them.

  • What tooks have you used for POA&M and continuous monitoring tracking?
  • Do you have 6 or more years developing or maintaining SA&A/ATO packages?

Work Location: Hybrid remote in Washington, DC 20534

Benefits & conditions

Pulled from the full job description

  • Professional development assistance
  • Tuition reimbursement
  • Parental leave
  • 401(k)
  • Health insurance
  • Retirement plan
  • 401(k) matching, * 401(k)
  • 401(k) matching
  • Dental insurance
  • Employee assistance program
  • Flexible schedule
  • Health insurance
  • Life insurance
  • Paid time off
  • Parental leave
  • Professional development assistance
  • Retirement plan
  • Tuition reimbursement
  • Vision insurance

Apply for this position

This job is hosted externally. Click below to view the full posting and apply.

Apply on indeed.com

Good distractions

Talks and stories from around this role — technically off-topic, practically not.

4:11 min

Introduction to cloud-native application developer security

Micah Silverman · WWC 2022

42 sec

Energy forecasts and resource demands of information technology

Marjolein Pordon · LIVE

2:58 min

Prioritizing security over rapid feature delivery

Jakub Andrzejewski · WWC 2023

1:45 min

Transitioning from software development to security roles

Stefania Chaplin · WWC 2022

3:44 min

Current industry adoption and future security initiatives

Alexander Allmendinger · LIVE

5:03 min

Navigating new cybersecurity compliance frameworks and laws

Kurt Eder · LIVE

Videos

See all

Related articles

See all