Ensure client systems are accessed, integrated, accredited, operated, maintained, and disposed of in accordance with applicable security policies and practices outlined in NIST Publication 800-53 (Latest version) Security and Privacy Controls for Federal Information Systems and Organizations and Client IT Security Policies and Procedures.
Possess excellent written and verbal communication skills.
Coordinate with System Owners to ensure that system account requests are for valid users eligible for access to information systems, have a valid need to access the systems, and that all requirements have been met before granting access to system(s).
Possess the ability and experience to review, validate, and audit client information systems from a security perspective, following NIST 800-53 (Latest version).
Verify and validate the user’s completion of required training where applicable.
Ensure user accounts are disabled upon separation.
Ability to perform Security Controls testing to audit and inspect system security controls, processes, and procedures.
Manage and track system security requirements during all phases of the system’s life cycle for all operational and development projects.
Possess the ability and experience in creating, updating, and maintaining client security documentation for each of the client systems.
Understanding, ability, and experience in review/audit of vulnerability and compliance scans.
Possess the ability and experience in reporting, responding, and tracking security incidents in accordance with NIST Guidance and client requirements.
Possess the ability and experience in maintaining and regularly reviewing audit trails and ensuring retention of audit trails for the period as defined.
BS/BA in Computer Science, Information Systems, Software Engineering, or other related analytical, scientific, or technical discipline.
CISSP Certification is highly preferred.
Five (5) years of experience performing ISSO roles and duties supporting the Federal Government.
Knowledge of Federal Government SA&A practices and policies, particularly FISMA and NIST Special Publications 800 series.
Industry-recognized and accepted certifications relating to IT security preferred (CISSP, GIAC, CEH, TNCP, Security+, Network+, etc.).
Ability to work independently and also collaborate with application developers, engineers and others.
Must be motivated and results oriented.

Softthink Solutions

New Jobs

Information System Security Officer