信息系统安全官（ISSO）
Information System Security Officer (ISSO)
职位名称：信息系统安全官（ISSO）
职位类别：信息技术
工作类型：全职
开始所需最低保密等级：无
员工类型：正式员工
所需旅行比例：无
旅行类型：无
* * *
机会介绍：
CACI 正在寻找一名信息系统安全官（ISSO）来支持国土安全部总部。作为信息系统安全官，您将在确保国土安全部总部信息系统的安全性和合规性方面发挥关键作用。您将在一个动态的环境中工作，与 IT 系统负责人、相关方和网络安全专业人员合作，实施并维护强大的安全控制措施。您的努力将直接有助于保护国土安全部的关键任务系统和数据。ISSO 将作为所有系统安全事务的单一联系人，为指定的项目管理组织提供直接支持，领导网络安全工程工作。这包括主导系统的授权运营（ATO）工作，并保持符合 FISMA、DHS 4300 系列、NIST 和 DHS 及部门指令的安全态势。ISSO 将执行完整的风险管理框架（RMF）活动，以做出授权运营（ATO）决策，并确保所有安全文档保持最新。
职责：
ISSO 将执行完整的风险管理框架（RMF）活动，以做出授权运营（ATO）决策，包括系统分类、安全控制选择和实施、自我评估、POA&M 开发以及持续监控。该职位需要制定和维护系统安全计划（SSPs），包括控制基线、继承关系、业务影响分析、实施说明、技术及系统描述，以及硬件和软件库存。ISSO 将制定和维护配置管理计划，进行安全影响分析，批准变更请求，并记录配置变更的安全影响。职责包括制定和测试应急计划和事件响应计划，以确保业务连续性，以及对指定系统进行年度风险评估、支持安全评估和漏洞评估。该职位涉及就所有网络安全问题向系统负责人和高级管理人员提供建议，并为评估和/或审计结果制定补救工作计划。ISSO 将维护硬件
查看英文原文
Job Title: Information System Security Officer (ISSO)Job Category: Information TechnologyTime Type: Full timeMinimum Clearance Required to Start: NoneEmployee Type: RegularPercentage of Travel Required: NoneType of Travel: None* * *The Opportunity:
CACI is searching for an Information System Security Officer (ISSO) to support the DHS Headquarters. As an Information System Security Officer, you will play a crucial role in ensuring the security and compliance of DHS HQ's information systems. You will work in a dynamic environment, collaborating with IT system owners, stakeholders, and cybersecurity professionals to implement and maintain robust security controls. Your efforts will directly contribute to safeguarding DHS's mission-critical systems and data. The ISSO will serve as the single point of contact on all systems security matters, leading cybersecurity engineering efforts for assigned Program Management Organizations with direct support to the Compliance Branch Lead. This includes spearheading systems' ATO efforts and maintaining a security posture in compliance with FISMA, DHS 4300 Series, NIST, and DHS and Component Directives. The ISSO will execute complete Risk Management Framework (RMF) activities for Authority to Operate (ATO) decisions and ensure all security documentation is kept up to date.
Responsibilities:
The ISSO will execute complete Risk Management Framework (RMF) activities for Authority to Operate (ATO) decisions including system categorization, security control selection and implementation, self-assessments, POA&M development, and continuous monitoring. This position requires developing and maintaining System Security Plans (SSPs) including control baselines, inheritance, Business Impact Analyses, implementation statements, technical and system descriptions, and hardware and software inventories. The ISSO will create and maintain Configuration Management Plans, conduct Security Impact Analyses, approve Change Requests, and document the security impact of configuration changes. Responsibilities include developing and testing Contingency Plans and Incident Response Plans to ensure business continuity, as well as conducting annual risk assessments, supporting security assessments, and vulnerability assessments across assigned systems. The position involves advising system owners and senior executives on all cybersecurity matters and developing remediation work plans for assessment and/or audit findings. The ISSO will maintain Hardware and Software Inventory Lists and conduct FISMA Scorecard Analysis. The ISSO will ensure proper access controls are implemented for system access, track and suggest technologies, processes, and practices designed to protect networks, devices, programs, and data from malicious attack, damage, or unauthorized access, and research and maintain proficiency in tools, techniques, countermeasures, and trends in computer and network vulnerabilities, data hiding, and network and device security and encryption.
Qualifications:
Required:
- U.S. Citizenship required
- DHS EOD suitability or Current DHS EOD preferred
- - BS/BA + 8 years of applicable experience in information security
- - 7+ years of experience in information security
- - Demonstrated expertise in RMF, Information Security processes, audits, tools, implementation, FISMA, NIST, IT security
- - Experience developing System Security Plans, POA&Ms, and Configuration Management Plans
- - Knowledge of NIST SP 800-37, NIST SP 800-53, and DHS 4300 Series requirements
Desired:
- One of the following Information Assurance Technician (IAT) Level III qualifications:
- Certified Information System Security Professional (CISSP)
- Certified Information Security Manager (CISM)
- CompTIA Advanced Security Practitioner (CASP+)
- Previous DHS experience
- Experience with CSAM, RegScale, eMASS, or similar GRC tools
- Experience supporting emergency operations or disaster response missions
- Knowledge of cloud security and FedRAMP authorization processes
- Experience with continuous monitoring and
-What You Can Expect:
A culture of integrity.
At CACI, we place character and innovation at the center of everything we do. As a valued team member, you’ll be part of a high-performing group dedicated to our customer’s missions and driven by a higher purpose – to ensure the safety of our nation.
An environment of trust.
CACI values the unique contributions that every employee brings to our company and our customers - every day. You’ll have the autonomy to take the time you need through a unique flexible time off benefit and have access to robust learning resources to make your ambitions a reality.
A focus on continuous growth.
Together, we will advance our nation's most critical missions, build on our lengthy track record of business success, and find opportunities to break new ground — in your career and in our legacy.
Pay Range:
There are a host of factors that can influence final salary including, but not limited to, geographic location, Federal Government contract labor categories and contract wage rates, relevant prior work experience, specific skills and competencies, education, and certifications. Our employees value the flexibility at CACI that allows them to balance quality work and their personal lives. We offer competitive compensation, benefits and learning and development opportunities. Our broad and competitive mix of benefits options is designed to support and protect employees and their families. At CACI, you will receive comprehensive benefits such as; healthcare, wellness, financial, retirement, family support, continuing education, and time off benefits.
Since this position can be worked in more than one location, the range shown is the national average for the position.
The proposed salary range for this position is:
$90,300-$189,600CACI is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, age, national origin, disability, status as a protected veteran, or any other protected characteristic.
Originally posted on Himalayas