Job Description - Senior Information Systems Security Officer
Telophase Corporation is seeking a motivated, career and customer-oriented senior Information Systems Security Officer (ISSO) to join our team.
The ISSO shall ensure the implementation and maintenance of security controls in accordance with the System Security Plan (SSP) in preparation for NIST RMF and 800-53 based independent security assessments and provide strong leadership in the development of a cyber security validation program for mission systems.
Responsibilities:
Support adoption and implementation of NIST-based standards across the organization in support of multiple mission system authorization boundaries including Cloud-based workloads
Support all steps of NIST RMF with strong background in NIST SP 800-53 Revision 5 and 800-53A
Participate in the selection of the organization's common security controls and in determining their suitability for use in the information system
Review the 800-53 security and privacy controls regarding their adequacy in protecting the planned or operational information system
Prepare and review documentation to include System Security Plans (SSPs), Risk Assessment Reports, Assessment and Authorization(A&A) packages, and support system authorization activities
Implement and enforcing organizational information systems security policies, standards, and methodologies
Evaluate security solutions to ensure they meet security requirements for processing unclassified/classified information; perform vulnerability/risk assessment analysis to support certification and accreditation. Red Team operations background such as penetration testing is bonus.
Manage changes to the information system and assess the security impact of those changes.
Required Skills & Experience:
Education: Bachelor's or higher in computer science/ technical discipline preferred or equivalent work experience
Years of related experience: 8+ years of experience is required as an ISSO/ ISSM including experience implementing, and enforcing information systems security policies, standards, and methodologies; creating security plans, policies & procedures, SSPs, and Risk Assessment Reports
Technical Skills: FISMA, FedRAMP, NIST RMF (Risk Management Framework), NIST 800-53 Revision 5 controls, and strong understanding Security Control Assessment (SCA) processes. Good understanding of Windows and Linux operating systems and architecture.
Good knowledge of public cloud providers such as Azure, AWS, and GCP highly desirable
Experience with applications for Amazon AWS, Microsoft Azure, GCP or other cloud platforms for large-scale, multi-tenant, SaaS systems highly desirable
Experience with security assessments of AWS/Azure/GCP environments preferred
Experience with AWS/Azure/GCP service offerings preferred
Skills and ideally certifications in public cloud providers (AWS, Azure, GCP) highly desirable
Cloud Security experience (AWS/Azure/GCP), including both IaaS and PaaS models preferred
Hands-on experience with public cloud services (AWS, Azure, GCP) preferred
Strong understanding of and experience in AWS / Azure / GCP cloud architecture
Experience developing applications for Microsoft Azure, Amazon AWS, Google or other cloud platforms for large-scale, multi-tenant, SaaS systems a bonus
Clearance: Must have or be able to attain Public Trust or higher
Desired Skills & Experience:
Certifications: Cybersecurity certifications, such as CISSP, CISA, CISM, CISA, CEH, GCIH, GCIA, GCFA, GCFE, CDMP, OSCP, OSCE, CDP-DG or similar
Work Type:
Onsite location on a regular basis with some hybrid telework options.
Note for staffing agencies: We are not accepting unsolicited resumes for this position. All inquiries must go through the Telophase team
As an Equal Opportunity Employer, it is Telophase’s policy to recruit, hire, and provide opportunities for advancement in all job classifications without regard to race, color, religion, sex, national origin, age, citizenship, marital status, sexual preference, parental status, or disability.
All Job Ads are subject to GrabJobs’s Terms of Service. We allow users to flag postings that may be in violation of those terms. Job Ads may also be flagged by GrabJobs moderation team. However, no moderation system is perfect, and flagging a posting does not ensure that it will be removed.
Be the first to receive the latest Others Full-Time Jobs in the US.
Setup your job alert:
By activating job alerts, I agree to GrabJobs Terms & Privacy Policy. I can unsubscribe to job alerts anytime.
Skip
GrabJobs is the no1 job portal in the US, connecting you to thousands of jobs fast!
Find the best jobs in the US, apply in 1 click and get a job today!