Information System Security Officer (ISSO)

An information system security officer for Tria Federal supporting a Department of Homeland Security customer, on site at its Washington headquarters once or twice a week. The ISSO carries systems through initial assessment and authorisation to operate under NIST 800-37, selects and tailors controls in the CSAM tool, documents NIST 800-53 controls in the SSP, produces A&A artefacts and ATO packages, runs annual risk self-assessments, performs security impact analyses, checks STIG implementation on infrastructure devices, and manages POA&Ms.

It requires three to five years in cybersecurity, DHS experience and Public Trust, CSAM and RMF knowledge, a relevant degree, and Security+; CISSP, CGRC or CISM is welcome.