Position OverviewWe are seeking an Information System Security Officer (
Cybersecurity Assessment & Authorization). You will support security assessments for diverse application domains, including cloud computing environments. This critical role serves as the primary
Subject Matter Expert (SME) for the A&A process, managing large-scale, high-risk security compliance and architecture initiatives.
Key Responsibilities- Lead Risk Assessments: Conduct security assessments and document compliance using NIST RMF and ISO frameworks.
- Manage A&A Processes: Oversee validation, accreditation, and documentation utilizing Governance, Risk, and Compliance (GRC) tools.
- Design Secure Architecture: Support blueprints, standards, and guidelines for secure enterprise IT infrastructures.
- Conduct Vulnerability Scanning: Interrogate systems for configuration status using network and vulnerability scanning tools.
- Act as A&A SME: Guide stakeholders, cross-functional business units, and new A&A resources through the USPS validation process.
- Brief Leadership: Build action plans, manage schedules, and brief executives on cross-functional IT risk and assurance.
Required Qualifications- Framework Expertise: Proven proficiency with NIST Risk Management Framework (RMF) and ISO standards.
- Technical Skills: Strong background in GRC systems, security architecture principles, and network scanning technologies.
- Project Management: Track record of driving large, complex, and high-risk IT initiatives.
- Soft Skills: Excellent organizational skills alongside senior-level executive briefing capabilities.
Experience, Education & Certifications- Experience: Minimum 5+ years of direct experience in Cybersecurity Assessment & Authorization (A&A), Information Assurance, or Risk Management Framework (RMF) environments.
- Education:Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field (relevant senior-level experience may substitute for a degree).
- Certifications: a current high-level security certification such as ICS2 CISSP (IAM Level III standard), ISACA CISM, or CGRC (Certified in Governance Risk and Compliance) preferred.
****Candidates must be able to obtain a Postal Sensitive Clearance (US Citizenship or Green Card required). Additionally, candidates must not have traveled outside of the USA for a combined period not to exceed 6 months within the last 3 years.*** 
