Information Systems Security Officer Jobs in Washington, DC

PMdigital.ai is looking for an Information Systems Security Officer to join our growing team. This work will be performed primarily in a remote/virtual environment but may require on-site activities at IHSC Headquarters in Washington, DC on an as-needed basis, as determined by the Government.

Summary: Performs substantive cybersecurity risk-management, security-authorization, continuous-monitoring, vulnerability-management, compliance, security-documentation, and incident-support work for assigned IHSC IT systems and solutions. The ISSO develops, maintains, coordinates, analyzes, and tracks cybersecurity artifacts and activities required to support Government security decisions. The designated Government Authorizing Official retains authority to authorize system operation and accept system risk.

Duties and Responsibilities • Develop, maintain, coordinate, and track security-authorization and Risk Management Framework documentation and supporting evidence. • Develop and maintain system-security documentation, control narratives, security plans, risk documentation, POA&M information, continuous-monitoring records, and other required cybersecurity artifacts. • Collect, analyze, validate, and organize security-control implementation evidence. • Conduct security-control, compliance, vulnerability, risk, and documentation analyses and document findings. • Support security assessment and authorization activities by preparing required packages, coordinating artifacts, tracking deficiencies, and resolving documentation issues. • Maintain authorization-package status, milestones, dependencies, risks, issues, and outstanding actions. • Support continuous-monitoring activities, including analysis and tracking of security controls, vulnerabilities, findings, remediation activities, and required evidence. • Analyze vulnerability and security findings, document risk and remediation information, and track approved remediation activities. • Support incident-response coordination, documentation, status tracking, evidence collection, technical-response activities within the authorized scope, and required reporting. Authorized Government officials retain responsibility for official incident-response direction, reporting determinations, and applicable risk decisions. • Develop cybersecurity status reports, dashboards, briefings, risk summaries, and other required products. Coordinate cybersecurity activities with system owners, technical teams, privacy personnel, data personnel, project/program personnel, and applicable Government security stakeholders. • Assess alignment with applicable NIST, FISMA, DHS, ICE, and other applicable cybersecurity requirements and document gaps and corrective actions. • Maintain cybersecurity documentation in authorized Government repositories and systems.

Required Knowledge, Skills, and Abilities • Demonstrated experience supporting Federal cybersecurity, information-security, Risk Management Framework, security-authorization, or continuous-monitoring activities. • Knowledge of NIST cybersecurity standards and guidance, Federal information-security requirements, vulnerability management, security controls, and risk management. • Ability to develop and maintain high-quality security-authorization and cybersecurity documentation. • Ability to analyze security findings, vulnerabilities, evidence, and compliance requirements. • Strong technical writing, analytical, organizational, coordination, and communication skills. • Experience supporting Federal or similarly regulated information systems is preferred. • Relevant industry-recognized cybersecurity certification is preferred.