Information Systems Security Officer

Responsibilities: Provide oversight of assigned networks to ensure compliance with Security Technical Implementation Guides (STIGs) and Information Assurance Vulnerability Management (IAVM) requirements. Support and lead RMF Assessment and Authorization (A&A) activities to obtain and maintain system ATOs under federal security requirements. Collaborate with ISSMs, Information System Owners, Security Control Assessors, Authorizing Officials, and engineering teams to maintain system security. Develop, review, and maintain Plans of Action and Milestones (POA&Ms), track deficiencies, and coordinate vulnerability remediation. Perform daily, weekly, monthly, and quarterly Continuous Monitoring (ConMon) reviews, primarily using Splunk. Assist with incident response activities and verify required system sanitization procedures. Identify critical and high-risk vulnerabilities and report network security posture to CISO and Authorizing Official stakeholders. Create and maintain security documentation, policies, procedures, and compliance reports. Support security assessments, risk analysis, patch validation, and continuous improvement initiatives.