Information System Security Officer; ISSO

Company Overview

XPECT Solutions, LLC. has built a strong reputation by supporting our clients in meeting their strategic goals and mission objectives. We provide high quality resources for a wide range of IT and security solutions at best-value pricing. Our success is built on a solid foundation of well-vetted, highly technical personnel, a disciplined project management approach, and an overarching commitment to customer service.

We develop, test, deploy, and support exceptional solutions that enhance system functionality, while maximizing reliability and availability, and ensure the tightest security.

Job Overview

The Information Systems Security Officer (ISSO) supports Federal Government customer in Clarksburg, WV. The ISSO supports the establishment, implementation, and maintenance of a life-cycle security model that develops, maintains, and dispositions information systems, services, and data, and safeguards their confidentiality, integrity, and availability.

The ISSO works with system owners to keep assigned systems operating in accordance with customer and federal security policy, supports Security Assessment and Authorization (SAA) activities in coordination with the Enterprise Information Security Section (EISS), maintains authorization artifacts and control evidence in the customer’s governance, risk, and compliance (GRC) tooling, and reports information system security incidents through the appropriate channels.

The position is hybrid, with on-site work at the in Clarksburg, WV.

Core Responebilties (to include but not limited to):

• Coordinate with system owners to ensure assigned systems are operated and maintained in accordance with federal and customer security policies and practices.
• Support the SAA process for assigned systems, verifying and validating conformance to federal and customer policies, regulations, FISMA, and specified security requirements, in parallel with EISS certification testing methodologies and strategies.
• Document security posture changes in the official GRC tool by uploading artifacts and evidence, writing security control responses, and assessing security controls.
• Maintain authorization work products on the contract cadence:
  System Security and Privacy Plan (SSPP) and Security Requirements Traceability Matrix (SRTM) quarterly;
  Plan of Action and Milestones (POA&M) monthly;
  Account Management Plan, Audit Logging Management Plan, SOPs, Business Impact Analysis, Incident Response Plan, Information System Contingency Plan, and security risk assessments as needed.
• Review system specifications, proposed system and engineering change requests, and modifications to determine impact on system security, and participate in change management through the Scaled Agile Framework (SAFe).
• Evaluate security vulnerabilities with regard to confidentiality, integrity, and availability, and recommend appropriate solutions, strategies, or mitigations.
• Review product acquisitions as they relate to information security.
• Support tier-level and data categorization and provide data categorization reports as assigned.
• Provide input to Interconnection Security Agreements (ISAs) and Security Assessment Reports (SARs) as needed.
• Coordinate with the ISSM and ISSM team to verify and validate that information systems conform to federal and customer policies, regulations, and standards; coordinate security-related issues with the Information Systems Security Engineer (ISSE).
• Report and coordinate all information system security incidents to the ISSM through the appropriate channels and provide vulnerability feedback. Incident response may require support after core working hours.
• Monitor trends in technology, perform system security analyses, and recommend strategies and solutions to improve system…