Senior Cloud Information Security System Officer (ISSO)

Mindpoint Group • Merrifield, VA

407d • $150,000 - $150,000

About The Position

The Senior Cloud Information Security System Officer (ISSO) at MindPoint Group is responsible for overseeing information assurance for a complex IT infrastructure program deployed in a public cloud environment. This role involves developing security authorization packages, ensuring compliance with federal regulations, and managing risks associated with information systems. The ISSO will work closely with various stakeholders to maintain security standards and support incident response activities.

Requirements

• Bachelor's Degree or equivalent experience.
• Minimum of 6+ years of relevant experience as an ISSO or Security Analyst.
• Understanding of Cloud services (AWS or Azure) and FedRAMP.
• Familiarity with NIST RMF, FISMA requirements, and security testing and evaluation processes.
• Demonstrated understanding of system administration, permissions, event monitoring, and logging.
• Thorough knowledge of FISMA and SA&A processes.
• Proficiency in writing technical analysis reports.
• Strong written and oral communication skills.
• Project management skills to track tasks and ensure timely delivery.
• Good business acumen and relationship management skills.

Nice To Haves

• Understanding and experience with CSAM is a PLUS.
• Strategy development skills.
• Ability to balance security requirements with mission needs.

Responsibilities

• Develop and update security authorization packages in compliance with FISMA.
• Validate protective measures for physical security to support system security requirements.
• Maintain an inventory of hardware and software for the information system.
• Develop, coordinate, test, and train staff on Contingency Plans and Incident Response Plans.
• Manage emerging and defined risks associated with assigned information systems.
• Coordinate with the client's Cybersecurity Unit to maintain compliance and authorization to operate (ATO).
• Perform risk analyses to determine essential safeguards.
• Support Incident Response and Contingency activities.
• Conduct security control assessments using NIST 800-53A and other relevant guidelines.
• Perform independent scans of applications, networks, and databases as required.
• Provide continuous monitoring to enforce client security policies and procedures.

Benefits

• Health/Dental/Vision insurance
• 401(k) matching
• Flexible Time Off
• Short-term/Long-term Disability Insurance
• Life Insurance
• Referral Bonuses
• Professional development reimbursement
• Maternity/Paternity leave
• Pre-tax commuter benefits
• Mentorship program opportunities

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Industry: Professional, Scientific, and Technical Services
• Education Level: Bachelor's degree