Information Systems Security Officer
New
United StatesFull-TimeMiddle
Salary125000 - 180000 USD per year
Apply NowOpens the employer's application page
Job Details
- Experience
- 5+ years
Requirements
- Bachelor's degree in Cybersecurity, Computer Science, Engineering, or related technical field (or equivalent experience).
- Active DoD 8140/8570 IAM Level II certification (e.g., CISSP, CISM, CASP+, CGRC, or equivalent).
- 5+ years of experience in information security, cloud security, or federal cybersecurity environments.
- Strong knowledge of NIST SP 800-53, RMF, FedRAMP, and FISMA frameworks.
- Hands-on experience managing cloud security in environments such as AWS GovCloud or similar federal systems.
- Proven experience supporting audits, authorization processes, and Continuous Monitoring programs in regulated environments.
- Strong analytical, documentation, and communication skills with ability to operate in highly regulated settings.
- Experience with security tools such as SIEM, vulnerability management, and CI/CD security pipelines is highly desirable.
Responsibilities
- Manage the full ATO lifecycle, ensuring systems meet and maintain federal security authorization requirements across cloud environments.
- Establish and maintain Continuous Monitoring (ConMon) programs, including vulnerability tracking, reporting, remediation, and POA&M management.
- Serve as the primary security authority for cloud architecture, ensuring secure design, defense-in-depth strategies, and compliance with FedRAMP and government standards.
- Lead and coordinate security audits, including 3PAO assessments, ensuring successful outcomes and timely remediation of findings.
- Oversee change control and significant change request processes, conducting security impact analyses and ensuring compliance with regulatory requirements.
- Maintain System Security Plans (SSP), security artifacts, and governance documentation aligned with federal frameworks.
- Act as the primary incident response coordinator, supporting investigation, root cause analysis, and implementation of preventive measures.
- Manage access control processes, audit compliance evidence, and enforce least privilege principles across systems.
View Full Description & ApplyYou'll be redirected to the employer's site
