ONSITE ONLY IN WASHINGTON DC OFFICE.

MINIMUM 3-5 YEARS RELEVANT EXPERIENCE

MINIMUM BACHELORS DEGREE.

MUST HAVE SECURITY PLUS OR OTHER SECURITY CERTIFICATION.

----------------------------------------------------------------------------

The ISSO is responsible for carrying out tasks required to authorize systems IAW NIST

800-53 and revisions and FEDERAL GOVERNMENT 4300A guidance. The ISSO serves as the principal advisor to the Information System Owner, INFOSEC, and ISSM on all matters, technical and otherwise, involving the security of an information system. ISSO is responsible for ensuring the implementation and maintenance of security controls in accordance with the System Security Plan (SSP) and FEDERAL GOVERNMENT policies. Achievement of this Task will require:

• Authority to Operate (ATO) Package Support through the Systems Engineering Life Cycle
• (SELC) for CLIENT systems
• IT System Vulnerability Management Support - Monitor and ensure remediation of security vulnerabilities and risks at the system level within the timeframes specified by CLIENT and FEDERAL GOVERNMENT policy, and applicable federal law. Analyze vulnerability and compliance scans to identify possible network security attacks and vulnerabilities in workstations, servers, and other network assets via cybersecurity tools.
• Respond to Indicators of Compromise within the specified timeframes identified within the request.
• Review control implementation statements within the SP to validate implementation and documentation of the risk.
• Maintain assigned systems hardware and software inventory monthly and review for End of Life (EOL)/End of Support (EOS)
• Monitor and track mitigation efforts for identified risks through POA&M.