Назад
Company hidden
6 дней назад

Senior Information Systems Security Officer (Cybersecurity)

143 230 - 175 000$
Формат работы
remote (только USA)
Тип работы
fulltime
Грейд
senior
Английский
b2
Страна
US
Вакансия из списка Hirify.GlobalВакансия из Hirify Global, списка международных tech-компаний
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/
TL;DR
Senior Information Systems Security Officer (Cybersecurity): Managing full-lifecycle RMF assessment and authorization activities across multiple concurrent systems, with an accent on NIST compliance, emerging AI/ML platforms, and complex distributed architectures. Focus on developing RMF artifacts, validating vulnerability remediation, adapting security controls to novel systems, and mentoring junior ISSO staff.

Location: US-Remote; based in Washington, DC and eligible for 100% remote work

Salary: $143,230–$175,000 annually

Company

hirify.global delivers IT services and solutions that help government agencies improve their operations and services.

What you will do

  • Execute all phases of the NIST SP 800-37 RMF lifecycle across multiple concurrent systems, network environments, and assessment pipelines.
  • Develop and maintain SSPs, SARs, SAPs, POA&Ms, contingency and incident response plans, risk assessments, interconnection agreements, and BOE packages.
  • Assess emerging technology systems, including AI/ML platforms and microservices-based architectures, and adapt NIST SP 800-53 Rev. 5 baselines where needed.
  • Collect evidence, maintain control traceability, review Tenable Security Center vulnerability results, and manage remediation through closure.
  • Provide security reporting, dashboards, metrics, and status updates while coordinating with system owners, stakeholders, and program leadership.
  • Mentor junior ISSO staff and develop SOPs, work instructions, and process documentation.

Requirements

  • Bachelor’s degree with 12+ years of information system security experience, or commensurate experience.
  • 8–10+ years in an ISSO or cybersecurity compliance role, including direct responsibility as ISSO of record.
  • Experience conducting RMF assessments across multiple network environments and managing multiple concurrent A&A assessments.
  • Experience developing complete RMF artifact packages, including SSPs, SARs, POA&Ms, RARs, and supporting BOE documentation.
  • Experience with microservices-based or distributed system architectures and component-level security assessments.
  • Proficiency with GRC platforms such as JCAM/CSAM, Xacta, or equivalent.
  • Active CompTIA Security+ CE certification.
  • DoD 8570.01-M / DoD 8140 compliance at IAM Level II or III, such as CISSP, CISM, CASP+, or equivalent.
  • Ability to maintain a Public Trust clearance is required.

Culture & Benefits

  • Collaborative environment focused on meaningful government IT work.
  • Flexible work environment.
  • Employee Assistance Program, corporate discounts, pet insurance, and referral bonus program.
  • Learning and development platform, including certification preparation content, plus training, education, and certification assistance for full-time employees.
  • Internal mobility opportunities.

Hiring process

  • Virtual video interview with the hiring manager and/or team; the camera must be on and a valid photo ID must be presented during each interview.
  • Enhanced biometric ID verification and background screening covering criminal history, highest education level, and employment history for the past seven years.

Будьте осторожны

Если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого. Это мошенники. Обязательно жмите «Пожаловаться» или пишите в поддержку. Подробнее в гайде →