Information System Security Officer (ISSO)

o Conduct initial Security Assessment and obtain system Authorization to Operate (ATO), in

line with NIST SP 800-37 Rev. 2.

o Maintain the Security Authorization or ATO of assigned system(s)

o Continuously update all Security Authorization documentation to maintain assigned system’s

ATO or system go-live dates.

o Select the baseline security controls for the IT system, using the CSAM Governance, Risk,

and Compliance (GRC) Tool, and tailor controls where appropriate.

o Document all relevant NIST 800-53 Security Controls for assigned IT systems in the System

Security Plan (SSP).

o Perform and document initial and annual risk self-assessments of all systems assigned

o Develop and document all supporting Security A&A artifacts (i.e., PTA, SSP, ITCP, BIA, CMP,

MOU, ISA).

o Produce Security Authorization package for Authorizing Official (AO) signature including

ATO

o Track the deployment of software to the environment that is not part of the base image.

o Conduct security impact analyses of proposed changes, provide recommendations.

o Ability to analyze configuration settings, implementation of STIGs, and conducting manual

checklists.

o Generate and manage Plan of Action & Milestones (POA&Ms), with meaningful milestones,

and clear/concise implementation statements for each non-compliant control for assigned

· 3-5 years Cybersecurity experience

· Working knowledge and experience with CSAM and the NIST RMF, · Solid knowledge of the process to obtain a system ATO and requirements to maintain the ATO

· Experience working with system stakeholders to assess and manage system cybersecurity risk

· Ability to synthesize complex IT system information and communicate system status and requirements in written products and verbal presentations

· Ability to write clear, concise and effective security control implementation statements

· Familiarity with configuration settings and vulnerability management analysis of infrastructure

devices

· Ability to draft a complete ATO package, to include the SSP

· Ability to work independently, and efficiently, with minimal direct supervision, and within given

• 401(k)
• Dental insurance
• Health insurance
• Paid time off