Senior Information System Security Officer – ISSO

🕒 il y a 5 jours

⚔️ Virginia – Distant

⚔️ Virginia – Remote

⏰ Temps Plein

🟠 Senior

👮‍♂️ Cybersécurité / Ingénieur Sécurité

Postuler Maintenant

Trouver des Emplois à Distance Similaires

Configurer une alerte email pour les nouveaux emplois

📊 Vérifiez votre score de CV pour ce poste

Améliorez vos chances d'obtenir un entretien en vérifiant votre score de CV avant de postuler.

Télécharger le CV

ASRC Federal

Site WebLinkedInTous les Emplois

5001 - 10000 employés

Fondée en 2003

🏛️ Gouvernement

🎖️ Défense

🔒 Cybersecurity

Government • Defense • Cybersecurity

ASRC Federal est une entreprise américaine spécialisée dans les services gouvernementaux et la technologie. Elle propose des solutions axées sur les missions, y compris l'ingénierie des systèmes, les services informatiques et d'entreprise, la cybersécurité, le soutien en intelligence et analytique, la logistique, et la gestion de programme aux clients fédéraux tels que le Département de la Défense, la Sécurité Intérieure et d'autres agences civiles et de sécurité nationale. ASRC Federal est la filiale de l'Arctic Slope Regional Corporation (une société autochtone de l'Alaska) spécialisée dans les contrats fédéraux et opère en tant que contractant principal sur divers programmes gouvernementaux.

Description

• Serve as the primary cybersecurity and privacy advisor to System Owners for assigned systems. • Lead RMF activities, including development and maintenance of System Security and Privacy Plans (SSPPs), authorization packages, risk documentation, and supporting artifacts. • Ensure systems maintain Authorization to Operate (ATO) through assessment support, continuous monitoring, and compliance with NIST RMF, FISMA, and federal security requirements. • Assess security risks, validate security controls, and coordinate remediation of vulnerabilities and Plans of Action and Milestones (POA&Ms). • Maintain system inventories, security documentation, contingency plans, configuration management plans, and privacy documentation. • Collaborate with ISSMs, System Owners, Security Control Assessors, and technical teams to integrate security throughout the system lifecycle. • Monitor system security posture, review vulnerability and compliance scan results, and support continuous authorization initiatives. • Provide cybersecurity guidance, develop security policies and procedures, and deliver security awareness training. • Support security engineering, certification and accreditation activities, and implementation of security controls across systems. • Recommend process improvements and automation opportunities to enhance RMF and cybersecurity operations.

🎯 Exigences

• Bachelor's degree in Cybersecurity, Information Assurance, Computer Science, Information Technology, or a related field. • Minimum 5–7 years of experience supporting information assurance, cybersecurity, RMF, or information system security, or an equivalent combination of education and experience. • Experience supporting federal cybersecurity programs and the NIST Risk Management Framework (RMF). • Experience developing and maintaining RMF documentation, authorization packages, and Governance, Risk, and Compliance (GRC) tools. • Strong knowledge of NIST SP 800-37, NIST SP 800-53, FISMA, FIPS 199, and federal privacy requirements. • Experience supporting Authorization to Operate (ATO), Continuous ATO (cATO), or Continuous Authorization efforts. • Strong analytical, communication, documentation, and stakeholder engagement skills.