Information System Security Officer – ISSO

🕒 Outubro 15

🏛️ District of Columbia, Washington – Remoto

🏛️ District of Columbia – Remote ☕ Washington – Remote

💵 $50 - $55 / hora

⏰ Tempo Integral

🟡 Pleno

🟠 Sênior

👮‍♂️ Cibersegurança / Engenheiro de Segurança

👻 Score fantasma 22%

O que significa: a chance de ninguém estar realmente contratando para esta vaga.Como ler: 60% ou mais significa que achamos que é uma vaga fantasma. Pontuações mais baixas preocupam menos.Como pontuamos: tempo em aberto, republicações, vagas abertas vs tamanho do time, rapidez para fechar vagas, e se o salário está divulgado.Observação: é uma estimativa de dados públicos, não um julgamento da empresa. Vagas reais podem ter pontuação alta, então use como uma dica, não como um fato.

Candidatar-se

Encontrar Vagas Remotas Similares

ELYON International

SiteLinkedInTodas as Vagas

201 - 500 funcionários

💼 Consultoria

🏥 Saúde

📦 Logística

Consulting • Healthcare • Logistics

A ELYON International é uma empresa especializada em soluções de modernização de TI para empresas comerciais e agências governamentais. Com mais de 26 anos no mercado e uma equipe de 180 consultores operando em 22 estados, a ELYON oferece uma ampla gama de serviços, incluindo modernização de infraestrutura, aplicativos, dados e segurança. A empresa enfatiza uma abordagem baseada em resultados para revitalizar ecossistemas de TI, garantindo que as organizações acompanhem os avanços tecnológicos. A ELYON também fornece gestão de cibersegurança e riscos, serviços de nuvem, soluções de força de trabalho em TI e gestão de identidade e acesso para aumentar a eficiência operacional e a segurança. Suas soluções são projetadas para melhorar a competitividade empresarial e a capacidade de resposta governamental no cenário digital em rápida evolução.

Descrição

• Serve as an ISSO for assigned federal information systems and applications • Support implementation and ongoing assessment of security controls in accordance with applicable federal cybersecurity requirements • Support the Risk Management Framework (RMF) throughout the system development and operational lifecycle • Develop, maintain, and review system security documentation and authorization artifacts • Support Assessment and Authorization (A&A) and Authority to Operate (ATO) activities • Maintain and update SSPs, POA&Ms, risk assessments, and related security documentation • Track security vulnerabilities, findings, remediation activities, and corrective actions • Coordinate vulnerability scanning and remediation with system administrators, developers, engineers, and security teams • Support continuous monitoring and ongoing security authorization activities • Evaluate proposed system changes for potential security impacts • Assist system owners and technical teams in implementing and documenting security controls • Support security audits, assessments, and control validation activities • Monitor compliance with applicable cybersecurity policies and standards • Conduct or support security risk assessments and provide mitigation recommendations • Coordinate with incident response and cybersecurity teams when security events or vulnerabilities are identified • Develop security status reports, metrics, and briefings for program and security leadership • Promote security best practices across engineering, development, cloud, and operational teams

🎯 Requisitos

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Information Systems, or a related discipline • 5+ years of cybersecurity or information assurance experience, including experience supporting federal information systems • Hands-on experience performing ISSO, information assurance, or security compliance responsibilities • Strong understanding of the NIST Risk Management Framework (RMF) • Experience with NIST SP 800-53 security controls • Experience supporting A&A/ATO processes • Experience developing and maintaining SSPs, POA&Ms, risk assessments, and security authorization documentation • Knowledge of vulnerability management, security assessments, and continuous monitoring • Understanding of system development lifecycle and configuration/change management processes • Strong technical documentation and communication skills • Ability to collaborate effectively with technical teams, system owners, and program stakeholders • Ability to meet applicable federal background investigation requirements • Preferred: previous experience supporting federal healthcare, health IT, or other large federal technology environments • Preferred: experience with enterprise security governance, risk, and compliance programs • Preferred: experience using GRC/RMF tools and vulnerability management platforms • Preferred: background supporting cloud environments such as Microsoft Azure or AWS • Preferred: experience working with application development and DevSecOps teams • Preferred: experience supporting security audits and federal compliance assessments • Preferred: familiarity with healthcare information security and protection of sensitive health information • Preferred certifications: CISSP, CAP / CGRC, CISM, CompTIA Security+, CASP+ / SecurityX, or relevant cloud security certifications

🏖️ Benefícios

• Paid sick leave • Optional medical and dental insurance • Optional 401(k) retirement plan • Employer-paid life insurance • Employer-paid short-term disability insurance • Optional life insurance

📊 Verifique sua pontuação de currículo para esta vaga

Melhore suas chances de conseguir uma entrevista verificando sua pontuação de currículo antes de se candidatar.

Enviar Currículo