Employment Type: Full-Time ** This position is contingent upon award of the contract.Job SummaryWe are seeking an
ISSO Lead to join our team. In this role, you will oversee subject matter experts and technical personnel who provide direct information technology assistance to Government clients. This person should have strong talent for project coordination, delegation, and proven ability to strategize and implement high-level program initiatives.
** This position is contingent upon award of the contract.Key Responsibilities- Maintains an accurate and up to date portfolio of all consular systems, system lifecycle and authorization status, as well as high level view of risk assessment and risk management activities for consular systems,
- Maintains version control and assists in preparing briefings and reports.
- Serve as the primary cybersecurity point of contact for assigned systems.
- Support the development, maintenance, and update of the System Security Plan (SSP), Risk Assessments, and Plan of Action & Milestones (POA&M).
- Ensure appropriate categorization of systems using FIPS 199 and NIST SP 800-60.
- Coordinate with the Information System Owner (ISO), System Administrators, and immediate Government Supervisors to manage the system's security posture.
- Monitor the implementation of security controls and report the effectiveness to the ISSO and AOs.
- Support continuous monitoring activities, including vulnerability scanning, patch management reviews, audit log analysis, and risk scoring.
- Review and approve security documentation updates in support of ATO maintenance and renewal.
- Provide input to and review Incident Response Plans and support incident handling when required.
- Provide direction and oversight to system-specific security operations contractors, ensuring their activities align with RMF requirements, A&A processes, and enterprise security policies.
- Receive and incorporate technical security data, evidence, and operational findings from system-specific security operations teams into RMF documentation and A&A packages.
- Actively participate in the activities to obtain and maintain Authority to Operate decisions for Consular Systems, utilizing the Risk Management Framework, for assigned systems.
- Ensure traceability of controls, risk decisions, and artifacts throughout the RMF lifecycle.
- Provide direct input to Security Assessment Reports (SARs) and ensure the remediation status and issue resolution reports are up to date.
- Ensure integration of security considerations during the system development lifecycle (SDLC), including within DevSecOps pipelines.
QualificationsRequired: - Active Secret
- Bachelor's degree or higher
- 10 years of professional experience FISMA, NIST and implementing security controls across various Government Agencies
- Must be a US citizen
Desired: - Experience supporting a client with disperse workforce in a variety of locations
Physical and Environmental ConditionsNormal Office Environment. Requires Sitting, Standing, Near Acuity, Speaking with colleagues and customers, Listening, Sight, Use of hands/fingers.
Additional Benefits- Performance Bonuses and annual salary reviews
- Health, dental, and vision insurance
- Short Term Disability, Long Term Disability, and Life Insurance
- 401(k) plan with company match
- Opportunities for professional growth and development
- A collaborative and inclusive work environment
