JobHabor
Sign inStart free trial

Information System Security Officer

Mantech

Location
USA-Remote
Workplace
Remote
Employment
Full Time
Salary
USD 117,000–195,100/yr
Apply on the employer’s site

Posted 1mo ago

The employer’s full description could not be read from their board. This is a summary of the posting — follow the apply link for the original.

Responsibilities

  • Categorize systems (FIPS 199) considering PII/NPI data risks
  • Build control packages applying NIST SP 800-53 controls
  • Develop the SSP, draft implementation statements, and collect evidence
  • Guide system owners on writing and resolving implementation statements
  • Drive controls to secure status through testing
  • Ensure data integrity, encryption-in-transit (TLS), and IAM
  • Partner with Security Assessment Provider/SCA for artifact quality
  • Advise system owners on control prioritization
  • Support RMF & A&A: CRF input, Change Request Reviews, POA&M tracking
  • Support SA&A Project List and SOPs/A&A artifacts

Requirements

  • Hands-on experience with NIST RMF (800-30, 800-37, 800-53, 800-53A)
  • Demonstrated experience building control packages and drafting implementation statements
  • Experience creating or supporting Security Assessment Plans and Security Assessment Reports
  • Experience with Q-Compliance (or ability to ramp quickly)
  • Experience interpreting data from vulnerability scanning tools (Tenable, Qualys)
  • Understanding network architectures (SaaS, IaaS, PaaS)
  • Technical background sufficient to collaborate with system owners on design documentation

Preferred

  • SME-level knowledge of NIST SP 800-137 (ISCM)
  • 1+ years of technical experience with Python, Java, or PHP
  • 1+ year of experience with a GRC tool (such as CSAM)
  • Experience with Q-Compliance and/or Q-Audit
  • Experience with API testing (REST APIs), JSON payload security, and/or scripting and automation
  • Relevant industry certifications (CISA, CAP, CISSP, Security+)

Skills

  • NIST RMF
  • NIST SP 800-53
  • NIST SP 800-53A
  • NIST SP 800-30
  • NIST SP 800-37
  • NIST SP 800-137
  • Tenable
  • Qualys
  • SaaS
  • IaaS
  • PaaS
  • Python
  • Java
  • PHP
  • CSAM
  • API testing
  • REST APIs
  • JSON
  • CISA
  • CAP
  • CISSP
  • Security+

Similar roles