Information Systems Security Officer

Duties: Provides Subject Matter Expertise for Cyber Security and Trusted System Technology. Applies advanced technical knowledge and analysis of specialized functional areas in task requirements to develop solutions to complex problems. Research, writes, reviews, disposition feedback and finalizes recommendations regarding cyber (A&A), security test and evaluation reports and security engineering practices and processes. Conducts research and writes risk assessment reports to include risk thresholds, evaluation and scoring. Supports analysis of the findings and provides expert technical guidance for mitigation strategies, including implementation advice on the cybersecurity risk findings and other complex problems. Provides Overall Subject Matter Expertise to the Information Security Assessment and Authorization (A&A) program that currently comprises over 250 FISMA systems of varying size and complexity. Provides specific guidance and technical expertise in the form of standards, policies, procedures, and oversight for the DOC A&A program. Review and provide recommendations based on analysis for Privacy Impact Assessments (PIA).Review and provide recommendations based on analysis for Third Party Website and Applications (TPWA).Review and analyze all system artifacts for accuracy, completeness, in suport of an Authorization to Operate (ATO) requests. Create or Review ATO packages prior to submission to CISO and CIO approval. Ensure all assessment and audit reports are uploaded properly to the DOC FISMA tool. Conduct reviews of closed Plan of Actions and Milestones (POA&M) for completeness and compliance. Develop and support the ongoing authorization (OA) process that includes continuous monitoring. Required

Candidate Qualifications: Active TS/SCI Clearance.5+ years of related experience actively working with the NIST 800 Series. Possess at least one related professional security certification. Experience working with FIPS 200, FISMA, the Privacy Act, and possess a working knowledge of Risk Management and associated Artifacts required by FISMACyberCore has, on many occasions, expressed support and commitment to the principles of diversity and equal employment opportunity. It is CyberCore's policy to recruit, hire, train, and promote individuals, as well as administer all personnel actions, without regard to race, color, national or ethnic origin, age, religion, disability, sex, sexual orientation, gender identity and expression, veteran status or any other characteristic protected under applicable federal or state law. CyberCore will not tolerate unlawful discrimination and any such conduct is prohibited. CyberCore is committed to ensuring that CyberCore's workforce and volunteers reflect America's diverse population. CyberCore knows that such diversity will enrich the company with the talent, energy, perspective and inspiration we need to achieve our mission.