[Hiring] Information Security Systems Officer @Guidehouse

Role Description

Support the implementation and ongoing execution of the NIST RMF requirements across assigned authorization boundaries.

• Assist in system categorization in accordance with FIPS 199 and NIST SP 800-60 guidance.
• Help identify, document, and maintain applicable NIST SP 800-53 r5 security and privacy control implementations, control tailoring and inheritance.
• Develop, review, and/or maintain RMF or security related documentation, including:
• FIPS 199
• System Security Plans (SSPs)
• Plans of Action and Milestones (POA&Ms)
• Privacy and risk assessments
• Continuous monitoring documentation
• System specific security control or organizational level standard operating procedures
• Memorandums of Agreement/Understanding or Interconnection Security Agreements
• Support security control assessments, remediation efforts, and authorization activities.
• Identify security weaknesses, vulnerabilities, and compliance gaps; document findings and work with stakeholders to develop corrective actions.
• Manage and maintain POA&Ms resulting from continuous monitoring or assessment results to ensure weaknesses are tracked through to remediation and closure.
• Support the preparation of boundaries for Authorization to Operate (ATO), reauthorization, and ongoing authorization activities.
• Monitor systems for compliance with FISMA and organizational cybersecurity policies, standards, and procedures.
• Ensure security requirements are integrated into system design, development, implementation, and operational changes.
• Support continuous monitoring activities, including control status reviews, vulnerability management, configuration management, and periodic assessments.
• Coordinate vulnerability scanning, review scan results, and track remediation of identified findings.
• Assist in incident response coordination, reporting, investigation, and follow-up corrective actions.
• Promote security best practices and help ensure systems maintain an acceptable level of risk.
• Manage boundary records in the applicable governance, risk, and compliance tool.

Qualifications

• Bachelor’s degree in computer science, information technology, or cybersecurity.
• Current Security+ certificate.
• Minimum (3) three years of experience in cybersecurity.
• Experience utilizing enterprise cybersecurity risk management and governance tools.
• Experience with cloud security.
• Must be able to obtain and maintain a Federal or DoD Public Trust.
• Working knowledge or familiarity with:
• FISMA (2014): Federal mandated framework for information security
• NIST SP 800-37 Rev. 2: Risk Management Framework for Information Systems and Organizations
• NIST SP 800-53 Rev. 5: Security and Privacy Controls for Information Systems
• NIST SP 800-53A: Assessing Security and Privacy Controls

Requirements

• Working knowledge or experience with NIST IR 8467 Genomic Data Cybersecurity and Privacy Frameworks Community Profile.

Benefits

• Medical, Rx, Dental & Vision Insurance
• Personal and Family Sick Time & Company Paid Holidays
• Parental Leave
• 401(k) Retirement Plan
• Group Term Life and Travel Assistance
• Voluntary Life and AD&D Insurance
• Health Savings Account, Health Care & Dependent Care Flexible Spending Accounts
• Transit and Parking Commuter Benefits
• Short-Term & Long-Term Disability
• Tuition Reimbursement, Personal Development, Certifications & Learning Opportunities
• Employee Referral Program
• Corporate Sponsored Events & Community Outreach
• Care.com annual membership
• Employee Assistance Program
• Supplemental Benefits via Corestream (Critical Care, Hospital Indemnity, Accident Insurance, Legal Assistance and ID theft protection, etc.)
• Position may be eligible for a discretionary variable incentive bonus