ISSO

Sentar•Charleston, SC

About The Position

Sentar is seeking an ISSO to support a Defense Health Agency (DHA) customer that tracks and manages Risk Management Framework (RMF) approvals for medical devices deployed in medical treatment facilities worldwide. The role evaluates, tests, monitors, and maintains information security policies and procedures for medical devices and systems, ensuring security designs, controls, and procedures align with information security standards and appropriately mitigate exposure risks. It identifies security violations, determines their causes, and implements procedures to prevent future incidents. The employee will serve in an Information System Security Manager (ISSM) support role, driving and managing Assessment and Authorization (A&A), Assess and Incorporate (A&I), and cybersecurity/RMF requirements under DHA to obtain and maintain Authorizations to Operate (ATOs) for assigned Department of War (DoW) medical systems, including applications, networks, and devices. The position supports multiple RMF efforts at once and involves regular communication with product vendors to encourage completion of associated RMF tasks. The candidate should be able to work independently and contribute to a team as needed, manage multiple priorities, and maintain strong time management. Under general direction, the role uses specialized knowledge to solve complex problems or direct daily team activities, sets priorities for assigned tasks, interprets issues, and develops best practices. It may include directing resources, prioritizing tasks, and guiding less experienced team members. The position relies on experience, interpersonal skills, and broad field knowledge to ensure work complies with policies, procedures, and business strategy.

Requirements

IAT Level II certification.
A bachelor's degree and six years of Cybersecurity/Information Technology experience, or ten years of hands-on Cybersecurity/Information Technology experience.
Demonstrated experience with the Risk Management Framework.
Experience developing RMF packages, including POA&Ms with mitigation statements, Security Plans, Risk Assessments, architecture diagrams, hardware/software inventories, and system/site policies, procedures, and processes.
Experience working within the DoW.
Excellent time management skills and ability to manage multiple priorities.
Excellent customer service and organization skills.
Excellent oral and written communication skills.
Ability to work independently and contribute to a team when necessary.

Nice To Haves

IAT/IAM III certification.
Experience under DHA.
Familiarity and experience with the DoW eMASS tool.
Familiarity with NIST publications.
Experience assessing systems using NIST 800-53 and/or DISA STIGs and SRGs.

Responsibilities

Evaluate, test, monitor, and maintain information security policies and procedures for medical devices and systems.
Ensure security designs, controls, and procedures align with information security standards and appropriately mitigate exposure risks.
Identify security violations, determine their causes, and implement procedures to prevent future incidents.
Drive and manage Assessment and Authorization (A&A), Assess and Incorporate (A&I), and cybersecurity/RMF requirements to obtain and maintain ATOs for assigned DoW medical systems.
Support multiple RMF efforts simultaneously for medical devices and systems.
Communicate regularly with product vendors to encourage completion of associated RMF tasks.
Establish priorities for assigned tasks and use judgment to interpret issues and develop best practices.
As needed, direct resources, prioritize tasks, and provide guidance to less experienced team members.
Ensure task completion complies with policies, procedures, and business strategy.

Benefits

Voluntary medical, dental, and vision insurance, with flexible spending plan options.
Voluntary life, critical illness, accident, and long-term care insurance options.
Group term life, short-term disability, and long-term disability coverage for qualifying employees.
Generous 401(k) match.
Competitive paid time off plan that increases quickly with years of service.
Holiday schedule and other leave programs, including bereavement, maternity, jury, and military duty leave.
Tuition reimbursement.
Professional development reimbursement.
Recognition and awards programs.
Employee ownership.