Information Security Systems Officer (ISSO)

• Support the implementation and ongoing execution of the NIST RMF requirements across assigned authorization boundaries.
• Assist in system categorization in accordance with FIPS 199 and NIST SP 800-60 guidance.
• Help identify, document, and maintain applicable NIST SP 800-53 r5 security and privacy control implementations, control tailoring and inheritance.
• Develop, review, and/or maintain RMF or security related documentation, including:
• FIPS 199
• System Security Plans (SSPs)
• Plans of Action and Milestones (POA&Ms)
• Privacy and risk assessments
• Continuous monitoring documentation
• System specific security control or organizational level standard operating procedures
• Memorandums of Agreement/Understanding or Interconnection Security Agreements
• Support security control assessments, remediation efforts, and authorization activities.
• Identify security weaknesses, vulnerabilities, and compliance gaps; document findings and work with stakeholders to develop corrective actions.
• Manage and maintain POA&Ms resulting from continuous monitoring or assessment results to ensure weaknesses are tracked through to remediation and closure.
• Support the preparation of boundaries for Authorization to Operate (ATO), reauthorization, and ongoing authorization activities.
• Monitor systems for compliance with FISMA and organizational cybersecurity policies, standards, and procedures.
• Ensure security requirements are integrated into system design, development, implementation, and operational changes.
• Support continuous monitoring activities, including control status reviews, vulnerability management, configuration management, and periodic assessments.
• Coordinate vulnerability scanning, review scan results, and track remediation of identified findings.
• Assist in incident response coordination, reporting, investigation, and follow-up corrective actions.
• Promote security best practices and help ensure systems maintain an acceptable level of risk.
• Manage boundary records in the applicable governance, risk, and compliance tool.

• Bachelor’s degree in computer science, information technology, or cybersecurity.
• Current Security+ certificate.
• Minimum (3) three years of experience in cybersecurity.
• Experience utilizing enterprise cybersecurity risk management and governance tools.
• Experience with cloud security.
• Must be able to obtain and maintain a Federal or DoD Public Trust. Candidates must receive approved adjudication of their Public Trust prior to onboarding with Guidehouse. Candidates with an active Public Trust or existing suitability are preferred.
• Working knowledge or familiarity with, Working knowledge or experience with NIST IR 8467 Genomic Data Cybersecurity and Privacy Frameworks Community Profile

The annual salary range for this position is $74,000.00-$124,000.00. Compensation decisions depend on a wide range of factors, including but not limited to skill sets, experience and training, security clearances, licensure and certifications, and other business and organizational needs.

What We Offer:

Guidehouse offers a comprehensive, total rewards package that includes competitive compensation and a flexible benefits package that reflects our commitment to creating a diverse and supportive workplace.

Benefits include:

• Medical, Rx, Dental & Vision Insurance
• Personal and Family Sick Time & Company Paid Holidays
• Parental Leave
• 401(k) Retirement Plan
• Group Term Life and Travel Assistance
• Voluntary Life and AD&D Insurance
• Health Savings Account, Health Care & Dependent Care Flexible Spending Accounts
• Transit and Parking Commuter Benefits
• Short-Term & Long-Term Disability
• Tuition Reimbursement, Personal Development, Certifications & Learning Opportunities
• Employee Referral Program
• Corporate Sponsored Events & Community Outreach
• Care.com annual membership
• Employee Assistance Program
• Supplemental Benefits via Corestream (Critical Care, Hospital Indemnity, Accident Insurance, Legal Assistance and ID theft protection, etc.)
• Position may be eligible for a discretionary variable incentive bonus

About Guidehouse

Guidehouse is an Equal Opportunity Employer-Protected Veterans, Individuals with Disabilities or any other basis protected by law, ordinance, or regulation.

Guidehouse will consider for employment qualified applicants with criminal histories in a manner consistent with the requirements of applicable law or ordinance including the Fair Chance Ordinance of Los Angeles and San Francisco.