D

DLS Engineering

Information Assurance 3 Information System Security Officer

Security Governance, Risk & CompliancePosted on Nov 12
Full-timeMontgomery, AL, USA

About the Job

Requirements

  • At least 5 years of experience with Department of Defense cybersecurity policies and implementation of the Risk Management Framework (RMF), including NIST SP 800 series and CNSSI 1253.
  • Prior experience as an Information System Security Officer (ISSO) or Information System Security Manager (ISSM) supporting classified programs.
  • Experience assessing and documenting test or analysis data to demonstrate cybersecurity compliance.
  • At least 3 years of experience using security-relevant tools, systems, and applications in support of RMF, including NESSUS, ACAS, DISA STIGs, audit tools, ESS, eMASS, and PPS.
  • An IAM-II certification: CISM, CISSO, CISSP, CISSP-ISSMP, FITSP-M, GCIA, GCIH, GCSA, GICSP, or GSLC.
  • Certification in Governance, Risk, and Compliance (CGRC).
  • U.S. citizenship.
  • A current Top Secret clearance with SCI access (TS/SCI) or an active Secret clearance.
  • Ability to pass a government background check before employment.

Responsibilities

  • Perform security analysis of operational and development environments, threats, vulnerabilities, and internal interfaces to assess compliance with accepted industry and government standards.
  • Implement Assessment and Authorization (A&A) processes under the Risk Management Framework (RMF) for new and existing information systems.
  • Facilitate development of Memorandums of Understanding (MOUs), Interconnection Security Agreements (ISAs), and Risk Acceptance Letters.
  • Develop an Information System Continuous Monitoring (ISCM) strategy and monitor proposed or actual system and environmental changes to maintain compliance; audit systems to ensure security posture integrity.
  • Conduct assessments and test or analyze data to document compliance with security requirements; conduct risk assessments and investigations; recommend risk mitigations; coordinate incident response; and conduct periodic hardware and software inventory assessments.
  • Supervise development and deployment of program information security for all program systems to meet program and enterprise requirements, policies, standards, guidelines, and procedures.
  • Manage an assigned team to facilitate effective execution of the RMF.
  • Coordinate and participate in security assessments and audits.
  • Prepare, review, and present technical reports and briefings.

About the Company

Company size
Not listed
Company stage
Not listed
Total funding
Not listed
Headquarters
Not listed
Founded
Not listed

Recently Posted Jobs

Explore more opportunities at DLS Engineering

See more jobs