Information Security Systems Officer – ISSO

This is a fully remote position, open to applicants in United States.

📋 Description

• Assist in the implementation and ongoing execution of NIST RMF requirements across designated authorization boundaries.

• Aid in the categorization of systems as per FIPS 199 and NIST SP 800-60.

• Identify, document, and uphold NIST SP 800-53 Rev. 5 security and privacy control implementations, tailoring, and inheritance.

• Create, review, and sustain RMF and security documentation, which includes FIPS 199 documents, SSPs, POA&Ms, privacy and risk assessments, continuous monitoring documentation, SOPs, and security agreements.

• Support security control assessments, remediation efforts, and authorization processes.

• Recognize security weaknesses, vulnerabilities, and compliance gaps; document findings and coordinate corrective measures.

• Oversee POA&Ms through the remediation and closure processes.

• Assist with ATO, reauthorization, and ongoing authorization tasks.

• Monitor systems for compliance with FISMA and organizational cybersecurity policies.

• Integrate security requirements into system design, development, implementation, and operational adjustments.

• Support ongoing monitoring, vulnerability management, configuration management, and periodic assessments.

• Coordinate vulnerability scanning, review scan outcomes, and track remediation efforts.

• Help with incident response coordination, reporting, investigation, and corrective actions.

• Advocate for security best practices and acceptable risk levels.

• Manage boundary records in governance, risk, and compliance tools.

⛳️ Requirements

• Bachelor’s degree in computer science, information technology, or cybersecurity.

• Current Security+ certification.

• At least three (3) years of experience in cybersecurity.

• Experience using enterprise cybersecurity risk management and governance tools.

• Familiarity with cloud security.

• Ability to obtain and maintain a Federal or DoD Public Trust.

• Candidates must secure approved adjudication of their Public Trust before onboarding with Guidehouse.

• Working knowledge or familiarity with FISMA (2014).

• Working knowledge or familiarity with NIST SP 800-37 Rev. 2.

• Working knowledge or familiarity with NIST SP 800-53 Rev. 5.

• Working knowledge or familiarity with NIST SP 800-53A.

• Knowledge or experience with NIST IR 8467 Genomic Data Cybersecurity and Privacy Frameworks Community Profile is an added advantage.

• Travel may be required up to 10%.

🏝️ Benefits

• Medical, Rx, Dental & Vision Insurance

• Personal and Family Sick Time & Company Paid Holidays

• Parental Leave

• 401(k) Retirement Plan

• Group Term Life and Travel Assistance

• Voluntary Life and AD&D Insurance

• Health Savings Account, Health Care & Dependent Care Flexible Spending Accounts

• Transit and Parking Commuter Benefits

• Short-Term & Long-Term Disability

• Tuition Reimbursement, Personal Development, Certifications & Learning Opportunities

• Employee Referral Program

• Corporate Sponsored Events & Community Outreach

• Care.com annual membership

• Employee Assistance Program

• Supplemental Benefits via Corestream (Critical Care, Hospital Indemnity, Accident Insurance, Legal Assistance and ID theft protection, etc.)

• Position may be eligible for a discretionary variable incentive bonus

• Flexible benefits package