Cloud Information Systems Security Officer (ISSO) - Remote at MindPoint Group #vacancy #remote

Cloud Information Systems Security Officer (ISSO) – Remote

Department: GRC

Location:

Text code 9999 to to apply!

Since 2009, MindPoint Group has been the cybersecurity firm of choice for the most security-conscious US federal agencies and commercial enterprises.

We’re proud to be one of Inc. 5000’s fastest-growing companies in the country. With several -Best Places to Work- awards under our belts, we have a diverse employee-focused culture, accessibility, and communication between all levels and departments, and over 4 stars in reviews on Glassdoor.

Come be a part of what we’re building. We use our award-winning recruitment process to seek the most skilled, experienced, and driven information security consulting experts in the industry, while simultaneously empowering applicants to determine if MindPoint Group is the right fit for them. We are profoundly invested in selecting the right people to join our team and are equally driven to expand and develop careers long-term.

With positions throughout the US, a role at MindPoint Group promises you:

An opportunity to work within one of the most diverse DC-based organizations

Generous tuition and professional development reimbursements

Mentorship opportunities with leaders focused on your growth

Competitive benefits like 401k matching, 11 federal holidays, etc.

And more!

Job Description

This role is contingent upon award. MindPoint Group is seeking an experienced Information Systems Security Officer (ISSO) to support a federal customer. The ISSO will manage the overall security-related policies, procedures, laws and regulations; create, document and implement various security plans and compliance documents to enforce Information Assurance principles. Systems are deployed using a public cloud service provider to deliver advanced capabilities to the Federal government using IaaS, PaaS, and SaaS service models.

What you get to do every day:

Advise government program managers and stakeholders on security testing methodologies and processes

Conduct impact level categorizations for Confidentiality, Integrity, and Availability of the information on a system

Conduct implementation statement reviews

Create implementation statements

Advise on systems alignment with the NIST Cyber Security Framework (CSF)

Develop, coordinate, test Contingency Plans and Incident Response Plans

Develop and document incident reporting procedures for service desk, admins, and security staff

Review system security documentation to accommodate changes to policy or technology

Evaluate certification documentation and provide written recommendations for accreditation to government PMs

Assess changes in systems, environment, and operational needs that could affect accreditation

Perform system analysis, system audits, system monitoring, security control assessment/testing, risk management, and support incident response

Develop, maintain and manage Security Authorization and Assessment packages that include System Security Plans (SSP), Contingency Plans (CP), and other relevant security documentation for existing and new systems

Review proposed change requests related to system design/configuration and performing a security impact analysis (SIA) to provide approval or denial recommendations

Implement and manage Security Controls in accordance with the current revision of NIST 800-53

Conduct system certification tests, inspections, and reviews that include verification that the features and assurances required for each protection level are in place, and prepare Security Assessment Reports

Perform vulnerability/risk assessment analyses to support Assessment & Authorization (A&A) activities

Provide continuous monitoring to enforce client security policy and procedures and create processes that provide increased visibility to system owners on impacts on the security posture of systems

Develop, maintain, and facilitate the appropriate closure of POA&Ms and any related remediation activities

Identify and support system Interconnection Security requirements

Qualifications

US Citizenship with the ability to get a Public Trust required

What do you need?

Bachelor of Science degree in Information Systems, Computer Engineering, Computer Science, or Cyber Security, or related major; Experience may be substituted for degree requirement

Security experience with Cloud environments required. AWS experience preferred

At least one of the following certifications: CISSP, CCSP, CCSK, CISM, GSLC, CISA, CASP, or equivalent.

Strong understanding of FedRamp

At least 4 years of experience working in Information Assurance, with at least 2 years working in an ISSO role

Familiarity with the following Security Regulations and/or Frameworks:

FISMA.

OMB Circular A-130.

Privacy Act of 1974.

o NIST 800 Special Publication Series (i.e., 800-53, 800-53A, 800-37, etc.)

Federal Risk Authorization and Management Program (FedRAMP).

NIST Cybersecurity Framework (CSF).

ISO/IEC 27017:2015 Code of Practice for Information Security Controls Based on ISO/IEC 27002 for Cloud Services.

Strong communication, problem-solving, and analysis skills

Ability to work in remote teams

Additional Information

All your information will be kept confidential according to EEO guidelines.

Compensation is unique to each candidate and relative to the skills and experience they bring to the position. The salary range for this position is typically $115-130k. This does not guarantee a specific salary as compensation is based upon multiple factors such as education, experience, certifications, and other requirements, and may fall outside of the above-stated range.

Highlights of our benefits include Health/Dental/Vision, 401(k) match, Flexible Time Off, STD/LTD/Life Insurance, Referral Bonuses, professional development reimbursement, maternity/paternity leave, mobile phone stipend, pre-tax commuter benefits, the opportunity to participate in our mentorship program, and more!

MindPoint is committed to maintaining a diverse environment. All qualified applicants will receive consideration for employment without regard to sex, race, ethnicity, age, national origin, citizenship, religion, physical or mental disability, medical condition, genetic information, pregnancy, family structure, marital status, ancestry, domestic partner status, sexual orientation, gender identity or expression, veteran or military status, or any other basis prohibited by law.

Job applicants that are interested in one of our openings and may require a reasonable accommodation to participate in the job application or interview process, should contact us to request an accommodation.

Are you interested in a posted job opportunity but may not check all of the -boxes- for desired qualifications? If so, we encourage you to apply! Our commitment to sustain and champion an inclusive and dynamic community of employees is a high priority!

Text code 9999 to to apply!

ISO standards Amazon Web Services (AWS) FedRAMP Certified Information Security Manager (CISM) Certified Information Systems Security Professional (CISSP)

Залишити відповідь