Senior Information System Security Officer (ISSO)
ASSYST, Inc.
Washington, United States of America
yesterday
Role details
Contract type
Permanent contract Employment type
Full-time (> 32 hours) Working hours
Regular working hours Languages
English Experience level
SeniorJob location
Washington, United States of America
Tech stack
Computer Security
Information Systems
Information Security Management
Software Vulnerability Management
Splunk
ServiceNow
Plan of Action and Milestones
Vulnerability Analysis
Job description
- Continuity of Operations: Assume Lead ISSO duties when required to maintain uninterrupted ISSO functions.
- System Oversight: Perform senior ISSO responsibilities for assigned systems as directed by the Lead ISSO.
- Risk Management Framework (RMF): Lead RMF activities across assigned systems.
- Continuous Monitoring: Manage ongoing monitoring of security controls to identify and remediate risks.
- Vulnerability Management: Direct vulnerability scanning, analysis, and remediation efforts.
- POA&M Management: Develop, track, and resolve Plans of Action and Milestones (POA&Ms).
- Audit & Compliance Support: Provide documentation, evidence, and expertise during audits.
- Tool Proficiency: Maintain expertise in authoritative tools, including: ServiceNow, CSAM, Splunk, Vulnerability scanning platforms in use
- Collaboration: Partner with system owners, administrators, and stakeholders to ensure consistent execution of ISSO activities.
Requirements
- Bachelor's degree in Information Systems, Cybersecurity, or related field (or equivalent experience).
- 5+ years of experience in information system security or compliance roles.
- Strong knowledge of RMF, continuous monitoring, vulnerability management, and audit processes.
- Hands-on proficiency with ServiceNow, CSAM, Splunk, and vulnerability scanning platforms.
- Excellent communication, documentation, and stakeholder engagement skills.