Hybrid Senior Information System Security Officer – Hybrid

at Coalfire

• Job title: Senior Information System Security Officer – Hybrid
• Job type: Full Time
• Experience level: Senior
• Salary: Not specified
• Degree requirement: Bachelor's Degree
• Tech skills: Cloud
• Location requirements: Hybrid, Washington, United States

About the role

• Senior Information System Security Officer responsible for cybersecurity and compliance at Coalfire Federal. Overseeing security for information systems with hands-on experience in FISMA and NIST frameworks.

Responsibilities

• Assume the role of ISSO for information systems and third-party services identified as High Value Assets (HVA) by the agency;
• Perform technical security impact analysis for all changes to the information system;
• Provide the guidance and oversight necessary to ensure the completeness and accuracy of documentation related to the Primary Responsibility or the Supporting Role assigned to the System Owner, Information Owner or Steward;
• Ensure the implementation and maintenance of security controls in accordance with the Security Plan (SP) and Peace Corps policies and procedures;
• Ensure the assigned FISMA systems maintain their ATO through independent security assessment and authorization;
• Review all deliverables and RMF packages for accuracy;
• Have oversight responsibility to ensure proper access controls have been implemented and managed;
• Ensure audit logs are reviewed at an agreed upon frequency, where the frequency may increase if warranted by incident or situational awareness;
• Be responsible for conducting assessments of controls for their system to ensure the controls have been implemented properly and are still effective where the risk posture is documented in a system risk assessment report;
• Ensure documents provided to auditors are what was requested and approved for release;
• Ensure that new vulnerabilities are evaluated by the respective subject matter expert and corrective action implemented;
• Collaborate with the ISSE in conducting security impact assessments on changes to their respective FISMA systems;

Requirements

• Hands on experience and strong understanding of FISMA, NIST Risk Management Framework and associated special publications (800-37, 800-53, etc)
• Management skills
• Interpersonal skills
• Communication, written, verbal
• Leadership skills
• JCAM experience
• Knowledge of cloud technologies and FedRAMP processes
• Completed Bachelor’s degree from an accredited university in an IT related field, or equivalent combination of education and experience
• Ability to obtain a clearance or a Public Trust is preferred, however all clearance levels and non-cleared applicants will also be considered
• One or more of the following certifications: CISSP, CISA, or GSLC
• At minimum 5+ years of hands-on work experience with senior level ISSO duties; performing systems security assessments, preparing system security documentation, and/or performing security upgrades for live networks, desktop systems, servers, and enterprise databases leading to successful security authorization of such systems.

Benefits

• Paid parental leave
• Flexible time off
• Certification and training reimbursement
• Digital mental health and wellbeing support memberships
• Comprehensive insurance options