Senior Information Systems Security Officer

MindPoint Group is searching for a highly experienced Senior Information Systems Security Officer (ISSO) to support our customer in Arlington, Virginia.

Responsibilities:

• Lead Risk Management Framework Assessment & Authorization (A&A) activities for various information systems
• Lead the entire RMF cycle for all assigned systems to include: initiation, categorization, selection, implementation, assessment, authorization & continuous monitoring
• Implement & manage security controls in accordance with the current revision of NIST 800-53
• Conduct ongoing security reviews & tests of assigned systems to verify that security features and controls are functional and effective
• Develop Plan of Action & Milestones (POA&Ms) in response to identified vulnerabilities, and lead remediation efforts
• Develop security documentations to include, but not limited to, System Security Plans (SSPs), Plan of Actions & Milestones (POA&Ms), and other artifacts to support the Body of Evidence (BOE)
• Coordinate security testing exercises to include but not limited to: incident response, disaster recovery & contingency activities
• Review proposed change requests related to system design/configuration and perform a security impact analysis (SIA) to provide approval or denial recommendations
• Support external & internal audits of designated systems
• Develop & present, both verbally and in writing, security briefings to all levels of the organization including senior executives (CIO, DCIO & CISO)

Required:

• Bachelor’s Degree required
• Minimum of 10 years of relevant experience in functional responsibility
• Certified Information Systems Security Professional (CISSP) (required)
• Thorough understanding & knowledge of NIST Special Publications and SPA&A process
• Strong knowledge of NIST Guidelines & FISMA Cybersecurity compliance requirements
• Thorough knowledge of, and experience with, the NIST 800 series publications
• Proficiency in writing technical analysis & security briefs
• Strong written & oral communication skills
• Ability to work independently & collaboratively in a team environment
• Excellent interpersonal skills & the ability to lead and manage multiple ongoing projects
• Critical thinking
• Strategy development
• Balancing security requirements with mission needs
• Good judgment and business acumen