Information System Security Officer

Summary: The project focuses on sustaining, enhancing, and modernizing the customers’ Recruiting Information Support System to support large number of recruiters worldwide. It involves maintaining the legacy Oracle-based system while supporting the development and transition to Salesforce-based CRM. The effort addresses recruiting challenges through modern technology, data analytics, and improved system capabilities. A phased, carefully managed transition ensures uninterrupted recruiting operations while enabling long-term modernization., * Maintain the system’s Authority to Operate (ATO) by fulfilling all requirements outlined in the NIST Risk Management Framework (RMF)

• Conduct annual security control assessments and reviews, documenting findings and implementing corrective actions to address vulnerabilities
• Manage all system documentation and artifacts within the eMASS system, ensuring accuracy and completeness
• Develop and maintain the System Security Plan (SSP) and other required security documentation
• Stay abreast of emerging threats and vulnerabilities, recommending and implementing security enhancements to mitigate risks

• Minimum of 3 years of experience serving as an Information Assurance/ISSO in a regulated and compliant environment
• NIST RMF, Security Control Assessments, eMASS, System Security Plan (SSP), Vulnerability Management
• CISSP or CISM (IAM Level II) certification required