Information System Security Officer (ISSO) Manager
Deloitte•Arlington, VA
•$137,500 - $278,300•Onsite
About The Position
Our Deloitte Cyber team understands the unique challenges and opportunities businesses face in cybersecurity. Join our team to deliver powerful solutions to help our clients navigate the ever-changing threat landscape. Through powerful solutions and managed services that simplify complexity, we enable our clients to operate with resilience, grow with confidence, and proactively manage to secure success.
Requirements
- Strong technical skills and experience with IT and Operational Technology, both on-premise and in the cloud including FedRAMP
- Advanced experience with all steps within the NIST Risk Management Framework (RMF).
- Extensive experience with selecting, tailoring, implementing, assessing, and monitoring NIST SP 800-53 controls
- Advanced experience with governance, risk and compliance (GRC) solutions such as JCAM and OpenRMF
- Ability to work independently and collaborate as part of a team
- Effective written and verbal communication skills
- Meticulous attention to detail and quality of work product
- Ability to build and sustain professional relationships
- Ability to lead projects or workstreams
- Ability to manage and prioritize multiple tasks in a fast-paced and dynamic environment
- Strong interpersonal skills and professional demeanor
- Ability to meet deadlines
- Ability to provide clear guidance to others
- Bachelor’s degree
- Must be legally authorized to work in the United States without the need for employer sponsorship, now or at any time in the future
- Active Top Secret (SCI Eligibility) security clearance required
- Must be able to work onsite, 5 Days a week, at the client site in Washington, D.C.
- 7+ Years of Experience with the following: Serving as an Information System Security Officer (ISSO) supporting U.S. Department of Defense (DoD) or Federal Government information systems
- Performing security and compliance activities, including Security Assessment and Authorization (SA&A) activities and application of the NIST RMF
- Using Nessus to perform vulnerability and compliance scanning and review vulnerability results
- Developing, implementing and maintaining security policies, procedures, and standards
- Experience supporting security governance processes and leveraging GRC solutions such as JCAM and OpenRMF
- Certified Information Systems Security Professional (CISSP) certification OR Certified in Risk and Information Systems Control (CRISC) certification
Nice To Haves
- Experience supporting operational mission systems
- Experience preparing risk reports and security dashboards
Responsibilities
- Serve as the ISSO for designated information systems, maintaining System Security Plans (SSPs) and authorization documentation
- Lead ATO activities including, system categorization, security documentation development, control implementation, compliance, remediation action tracking, continuous monitoring, and security maturity activities
- Coordinate vulnerability and compliance assessments, review findings, and track remediation activities with system owners and technical stakeholders
- Monitor security control implementation, system integrity and prepare systems for assessments.
- Coordinate security incident response activities, communicate risk and compliance status, and support security governance and awareness efforts
Benefits
- discretionary annual incentive program
- reasonable accommodations for people with disabilities
- competitive benefits package
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
Upload and Match Resume
What This Job Offers
Job Type
Full-time
Career Level
Manager
