The Role
Serve as the cybersecurity subject matter expert for Assessment and Authorization processes. Assess threats, vulnerabilities, configurations, and risk; recommend mitigation controls; implement NIST RMF and ISO-aligned security practices; manage GRC documentation and accreditation activities; support cloud and enterprise security assessments; develop security architecture guidance; and coordinate initiatives with stakeholders and cross-functional teams.
Summary Generated by Built In
Overview
- Tier One Technologies is looking for an Information System Security Officer (ISSO) to support our US Government client.
- This remote contract-to-hire position can be originated in Falls Church, VA, Morrisville, NC or Eagan, MN.
- SELECTED CANDIDATES WITHOUT REQUIRED CLEARANCE WILL BE SUBJECT TO A FEDERAL GOVERNMENT BACKGROUND INVESTIGATION TO RECEIVE IT.
- Serve as the Subject Matter Expert (SME) for the Assessment and Authorization (A&A) process, providing strategic guidance to stakeholders, business units, and cross-functional teams while mentoring new A&A personnel and ensuring consistent implementation of security authorization requirements and best practices.
- Conduct assessments of threats and vulnerabilities.
- Determine deviations from acceptable configurations or enterprise or local policy.
- Assess the level of risk and develop and/or recommend appropriate mitigation countermeasures in operational and non-operational situations.
- A degree from an accredited College/University in the applicable field of services is required. If an individual's degree is not in the applicable field, then 4 additional years of related experience is required.
- 8+ years of overall cybersecurity-related experience.
- Ability to manage responsibility for security assessments of a variety of applications or domains, to include cloud computing, and to manage several project/initiatives of large size, complexity, and risk.
- Demonstrated proficiency in implementing security controls, conducting risk assessments, and documenting compliance measures based on NIST RMF and ISO standards to meet organizational and regulatory requirements.
- Demonstrated proficiency in successfully evaluating and supporting documentation, validation, and accreditation processes necessary to assure that new and existing information technology (IT) systems meet the organization's information assurance (IA) and security requirements.
- Demonstrated proficiency in ensuring appropriate treatment of risk, compliance, and assurance from internal and external perspectives.
- Demonstrated ability to support development of actionable security blueprints, principles, models, designs, standards, and guidelines to ensure enterprise IT architecture and support is consistent, usable, secure and adds value to the business.
- Experience with network and vulnerability scanning tools and technologies to interrogate systems for configuration and status.
- In-depth understanding of security architecture principles and best practices to design, implement, and maintain secure IT infrastructures in alignment with A&A policies.
- Demonstrated proficiency in utilizing Governance, Risk, and Compliance (GRC) tools for managing Assessment & Authorization (A&A) processes.
- Strong organizational skills and ability to build and maintain schedules and step-by-step action plans.
- Effective communication and collaboration skills to work with cross-functional teams, business units, stakeholders, and IT professionals, and brief executives.
- Must be a US Citizen or have permanent residence status (Green Card).
- Must be able to obtain a Position of Public Trust Clearance.
- Must be able to pass a drug screening, criminal history, and credit checks.
- Must have lived in the United States for the past 5 years.
- Cannot have more than 6 months travel outside the United States within the last five years. Military Service excluded. (Exception does not include military family members.)
Skills Required
- Bachelor’s degree from an accredited college or university in an applicable field, or four additional years of related experience if the degree is not applicable.
- At least 8 years of cybersecurity-related experience.
- Experience managing security assessments across applications or domains, including cloud computing environments.
- Experience managing large, complex, and high-risk projects or initiatives.
- Proficiency implementing security controls, conducting risk assessments, and documenting compliance using NIST RMF and ISO standards.
- Experience supporting IT system documentation, validation, accreditation, and Assessment and Authorization processes.
- Experience evaluating and supporting risk, compliance, and assurance activities.
- Ability to develop security blueprints, principles, models, designs, standards, and guidelines.
- Experience with network and vulnerability scanning tools and technologies.
- In-depth understanding of security architecture principles and secure IT infrastructure practices.
- Proficiency using Governance, Risk, and Compliance tools for Assessment and Authorization processes.
- Strong organizational, scheduling, action-planning, communication, and cross-functional collaboration skills.
- Must be a United States citizen or lawful permanent resident.
- Must be able to obtain a Position of Public Trust clearance.
- Must pass drug screening, criminal history, and credit checks.
- Must have lived in the United States for the past five years.
- Must not have more than six months of travel outside the United States during the past five years, excluding military service.
Am I A Good Fit?
Get Personalized Job Insights.
Our AI-powered fit analysis compares your resume with a job listing so you know if your skills & experience align.
Success! Refresh the page to see how your skills align with this role.
The Company
What We Do
Tier One Technologies is a national technical consulting, recruiting, and IT contracting firm serving primarily federal, state, and local government clients. It staffs IT professionals and provides software application management and development, business analysis, quality assurance, systems and network engineering, business intelligence, web services, infrastructure and security management, cybersecurity, and related administrative support for mission-critical work across civilian, defense, intelligence, and security sectors.
