Information Systems Security Officer (ISSO) / Information Systems Security Manager (ISSM)-RS3 Prog & Data Analytics
Position Title: Information Systems Security Officer (ISSO) / Information Systems Security Manager (ISSM)
Location: Arlington, VA (Remote)
Clearance Level: Secret
Responsibilities will include, but are not limited to:
- Ensure cybersecurity is integrated in all phases of the lifecycle sustainment and proactively support the Government’s efforts to maintain, update and continuously monitor Chief of Staff (CoS) application’s security posture, in accordance with the Risk Management Framework (RMF).
- Ensure cybersecurity is integrated in all phases of the lifecycle sustainment and proactively support the Government’s efforts to maintain, update and continuously monitor Chief of Staff (CoS) application’s security posture, in accordance with the Risk Management Framework (RMF).
- Identify and mitigate code vulnerabilities as measured by government provided “Fortify” tool; ensure that Development Teams prioritize findings in accordance with command priorities and provide POAM for Fortify findings.
- Develop Plan of Action & Milestones (POA&M) for non-compliant controls to meet assessment and authorization requirements.
Required qualifications
- Bachelor’s Degree in related field of study or equivalent experience.
- Minimum of three years of experience, one within DoD.
- Certifications: Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Certified Information Systems Auditor (CISA), CompTia Security +, Certified in Risk and Information Systems Control (CRISC), ISO/IEC 27001 Lead Implementer or Lead Auditor, Certified Ethical Hacker (CEH).
Skills Required
- Bachelor's degree in a related field or equivalent experience.
- Minimum three years of relevant experience, including at least one year within the DoD.
- Active Secret security clearance.
- Experience applying the Risk Management Framework (RMF) for assessment and authorization.
- Experience identifying and mitigating code vulnerabilities using Fortify (or equivalent) and producing POA&Ms.
- Certifications such as CISSP, CISM, CISA, CompTIA Security+, CRISC, ISO/IEC 27001 Lead Implementer/Auditor, or CEH.
What We Do
We are a provider of Information Technology (IT) professional services, software solutions and professional development training. Our core competencies evolved from leveraging IT enablers for knowledge management with an emphasis on Web Based Knowledge Portals and Portal Services, Server/System Services, SharePoint Development and System Administration and SQL Server Services. Our capabilities have expanded to include software development, technical training support and field support services. Our Mission Combine technical expertise, innovative approaches, and operational experience to solve our customers’ most complex challenges. Our Vision A corporate family driven to lead globally with innovative vision, flawless execution, continuous adaptability and a profound appreciation for the missions we serve. Guiding Principles Satisfy the customer – “Exceed expectations” Set the Example – “Be out front” Be Responsive – “Timing is everything” Persevere – “Find a way” Please also visit PTP Talent Acquisition on LinkedIn www.linkedin.com/in/ptptalentacquisition
