What are the responsibilities and job description for the Information System Security Officer position at Strategic Operational Solutions?
Brief Overview of Position:
Strategic Operational Solutions (STOPSO) is seeking candidates for Information System Security Officer (ISSO) roles to support a DHS client where we are focused on delivering support to join a mission-driven team dedicated to supporting FEMA's Compliance Division in maintaining compliance with FISMA and enhancing the security authorization services. Collaborate on diverse systems to protect communities nationwide from hazards. Position requires remote support.
Description of Duties:
- Be part of a cybersecurity compliance services support team and responsible for the technical cybersecurity efforts in coordination with the Senior Information System Security Officer and support the Compliance Branch Lead
- Provide ISSO support to enhance the cybersecurity risk level of FEMA's IT applications and systems
- Collaborate with development teams, system owners, and leadership to integrate security into the software development cycle
- Offer recommendations and tools to support zero-trust architecture strategy
- Utilize automation tools for risk reduction and achieve continuous compliance
- Categorize information systems, implement security controls, and conduct self-assessments
- Guide system owners on cybersecurity matters and conduct risk assessments
- Develop and maintain the System Security Plan (SSP) for FEMA security authorization packages
- Serve as a point of contact for the Cybersecurity Division in supporting all systems
Education, Experience, and Security Requirements:
- Possess a bachelor's degree in computer science or related field
- Possess at least five (5) years' experience in Computer Science or related field
- Possess IAT Level III Certification
- Possess a Top Secret security clearance
- Certified Information System Security Professional (CISSP), Certified Information Security Manager (CISM), CompTIA Advanced Security Practitioner (CASP ) certified or other cyber security professional certifications and relevant information security technology expertise
