Provide ongoing development and support of Risk Management Framework (RMF) packages for both new and existing information systems.
Implement DISA STIGs to comply with technical security requirements for all systems within accreditation boundaries.
Maintain accreditation of systems using eMASS, Exacta, or other Authorized Official (AO) approved tools.
Understand and create topology drawings to support accreditation requirements.
Understand and support Ports, Protocols, and Services Management policies and procedures.
Provide support for proposing, coordinating, and implementing information systems security policies, standards, and methodologies.
Create and update policy documents as required to support cybersecurity objectives and responsibilities.
Support emerging Cybersecurity Requirements.
Develop Plan of Action and Milestones (POA&M) and support applicable milestones.
Ensure security vulnerabilities are tracked and remediated.
Provide information security expertise throughout the lifecycle process.
Must be able to interface with other teams to create an overall solution to meet Assessment and Authorization (A&A) requirements.
Ability to align hardware and software requirements with cybersecurity requirements.
Effectively and professionally communicate with program team members and government leaders.

Must be a U.S. citizen with active Dept. of Defense Secret clearance or above.
Extensive knowledge of RMF & NIST 800-53 Rev. 5 including: Enterprise Mission Assurance Support Service (eMASS) experience.
DISA STIGs implementation experience.
Plan of Action and Milestones (POA&M) development experience.
Must have one DoD 8140/8570.01 IAT level II certification, such as CompTIA Security+ CE.
BS or MS in Computer Science, Mathematics, Engineering, Business, or a related field.
4+ years of additional experience in lieu of a bachelor’s degree will also be considered.
10+ years of combined information system experience including DoD policy, compliance documentation, and risk management.
Ability to align hardware and software requirements with cybersecurity requirements.
Knowledge of the following: Virtualization concepts.
Windows networks.
Proficient with the use of MS Office Suite (MS Project, Word, OneNote, Access, Visio, PowerPoint, and SharePoint).
Strong verbal and written communication skills.

Senior Information Systems Security Officer, ISSO

Key skills