Information System Security Officer

August 4, 2024

Apply Now
Logo of Spry Methods, Inc.

Spry Methods, Inc.

Government Financial Accounting โ€ข Enterprise Resource Planning โ€ข Cyber Security โ€ข Information Technology

Description

โ€ข Develop functional and technical requirements; serve as a POC for Information Systems with security issues; โ€ข Prepare and update reports to ensure that the unit complies with mandated internal and external security reporting requirements, including Federal Information Security Modernization Act (FISMA) and Capital Planning; โ€ข Coordinate security program and system elements with the agency IT Program Managers by evaluating system environments for security requirements and controls including: IT Security Architecture, hardware, software, telecommunications, security trends, and associated threats and vulnerabilities; โ€ข Manage security controls to ensure confidentiality, integrity and availability of information; โ€ข Build security into the system development process and define security specifications to Support the acquisition of new systems; โ€ข Support System Owners or Program Officers on the review of system procurement requests to ensure that security has been considered and included; โ€ข Adhere to and implement system security controls that ensure the protection of Sensitive but Unclassified (SBU) information using authentication techniques, encryption, firewalls, and access controls; โ€ข Complete Security Assessments; โ€ข Assist in the Assessment and Authorization process; โ€ข Create and/or update the System Security Plans and other ATO documentation; โ€ข Serve as an advisor in risk assessments of all systems and mitigate vulnerabilities; โ€ข Adhere to Continuous Monitoring practices to ensure that security controls are maintained over the life of IT systems โ€ข Assist the System Owner in the development, testing and maintenance of contingency plans, backup and storage procedures; โ€ข Document all procedures according to the organizations standards; โ€ข Audit and monitor application, system and security logs for security threats, vulnerabilities and suspicious activities; report suspicious activities to the agency Incident coordinator; โ€ข Monitor and coordinate patch management and scanning techniques for all unit systems; participate in identification and mitigation of all system vulnerabilities; โ€ข Support and facilitate the security awareness, training, and education program; โ€ข Assist the Information System Security Manager (ISSM), or CISO in any other security related duties, as required.

Requirements

โ€ข Public Trust โ€ข 5-8 years direct experience supporting federal organizations Cybersecurity programs as an ISSO. โ€ข Experience drafting FISMA related artifacts to include: system security plans, incident response plans, configuration management plan, FIPS 199, digital identity risk assessments, security impact analysis, contingency plan, security assessment plans and reports, Plan of Action and Milestones (POA&M), and training materials. โ€ข Experience in applying NIST Special Publications to information systems. โ€ข Experience with performing information system continuous monitoring of security controls to ensure that they continue to be implemented correctly, operating as intended and producing the desired outcome with respect for meeting the security requirements. โ€ข Knowledge of cybersecurity tools such as: Tenable, Qualys, Governance Risk Compliance (GRC) tools (e.g. Xacta, eMass, or CSAM, etc.). โ€ข Experience participating in security assessments and/or audits.

Apply Now

Discover 70,000+ Remote Jobs!

Join now to unlock all job opportunities.

Find your dream remote job

Discover hidden jobs

We scan the internet everyday and find jobs not posted on LinkedIn or other job boards.

Head start against the competition

We find jobs within 24 hours of being posted, so you can apply before everyone else.

Be the first to know

Daily emails with new job openings straight to your inbox.

Choose your membership

Cancel anytime

Loved by 10,000+ remote workers

Wall of Love

Frequently asked questions

We use powerful scraping tech to scan the internet for thousands of remote jobs daily. It operates 24/7 and costs us to operate, so we charge for access to keep the site running.

Of course! You can cancel your subscription at any time with no hidden fees or penalties. Once canceled, youโ€™ll still have access until the end of your current billing period.

Other job boards only have jobs from companies pay to post. This means that you miss out on jobs from companies that don't want to pay. On the other hand, Remote Rocketship scrapes the internets for jobs and doesn't accept payments from companies. This means we have thousands of more jobs!

New jobs are constantly being posted. We check each company website every day to ensure we have the most up-to-date job listings.

Yes! Weโ€™re always looking to expand our listings and appreciate any suggestions from our community. Just send an email to Lior@remoterocketship.com. I read every request.

Remote Rocketship is a solo project by me, Lior Neu-ner. I built this website for my wife when she was looking for a job! She was having a hard time finding remote jobs, so I decided to build her a tool that would search the internet for her.

Why I created Remote Rocketship

Choose your membership

Cancel anytime

Loved by 10,000+ remote workers
Built by Lior Neu-ner. I'd love to hear your feedback โ€” Get in touch via DM or lior@remoterocketship.com