ISSO Information Assurance/Security Specialist (Senior/SME)
Ashburn, VA 20148
Security: DHS Suitability Public Trust
Location: Remote from Wash DC Metro area
Position Overview
Anakim Consulting is hiring an Information System Security Officer (ISSO) with Senior or SME level expertise to lead Authorization to Operate (ATO) and continuous monitoring activities across multiple major applications (MA) and general support systems (GSS) for a large federal agency. This position requires hands-on experience in IT security, risk management, FedRAMP, and NIST standards. This individual will serve as a technical advisor to System Owners and senior leadership, directing security compliance, threat assessments, and cloud security initiatives. Key Responsibilities include (but are not limited to): - Authorization & Accreditation (A&A): Lead end-to-end Risk Management Framework (RMF) and ATO processes, preparing and maintaining comprehensive security packages (SSP, RA, PTA, PIA, ST&E, and POA&M) in compliance with NIST SP 800-53, SP 800-37, and FISMA standards.
- FedRAMP and Cloud Security: Develop, evaluate, and audit Cloud Service package documentation to ensure agency and FedRAMP compliance for cloud integrations.
- Vulnerability & Compliance Management: Oversee regular vulnerability scans (Qualys, Nessus, Nexpose, ACAS), analyze Splunk audit logs, evaluate system hardening (STIGs/SCAP), and drive POA&M remediation efforts.
- Continuous Diagnostics and Mitigation (CDM): Support and optimize CDM initiatives, automated security controls monitoring, and Zero Trust security architectures.
- Configuration and Impact Analysis: Serve on Change Control Boards (CCB) to review proposed system design changes, perform security impact analyses, and ensure baseline compliance.
- Leadership and Advisorship: Brief CISOs, System Owners, and senior stakeholders on overall system security posture, residual risk, and threat mitigation strategies.
- Other duties, as assigned.
|