Information Security with CISO

Location: Washington, DC Job Description: Serve as an ISSO Collaborate with other engineers to: Ensure security policies and settings are in place Build standardized security documentation Generate evidence of compliance once settings have been applied Analyze software Interpret security requirements Plan effective control implementations Take direct ownership of the Authorization to Operate (ATO) process Achieve ATOs for software across multiple government customers Provide outstanding customer service, policy expertise, and high-quality documentation Serve as the primary in-person point of contact for one or more Government customers Answer any government cybersecurity and compliance requirement questions Manage a Plan of Actions and Milestones (POA&M) for remediation of findings Independently interpret the findings of vulnerability scanning utilities such as: ACAS (Tenable Nessus) SCAP (STIG benchmark) Qualifications: 5+ years of ISSO experience Proficiency in interpreting and communicating government policy to a diverse audience Hands-on experience throughout all steps of the RMF process Experience with eMASS and/or XACTA Experience with ACAS and SCAP Specific experience working in both on prem and cloud environments Such as Amazon Web Services (AWS) Experience accrediting IT systems against U.S. Government standards including: NIST SP 800-53, CNSSI 1253 DISA STIGs DOD RMF, ICD 503, or DIACAP Active DOD 8140 or 8570 Certification (e.g. CISSP or Security+) Active DoD TS/SCI Clearance Job Type: Full-time Salary: $120,000-$160,000