Information Systems Security Officer II

PMdigital.ai is looking for an Information Systems Security Officer to join our growing team. This work will be performed primarily in a remote/virtual environment but may require on-site activities at IHSC Headquarters in Washington, DC on an as-needed basis, as determined by the Government.

• Develop, maintain, coordinate, and track security-authorization and Risk Management Framework documentation and supporting evidence.
• Develop and maintain system-security documentation, control narratives, security plans, risk documentation, POA&M information, continuous-monitoring records, and other required cybersecurity artifacts.
• Collect, analyze, validate, and organize security-control implementation evidence.
• Conduct security-control, compliance, vulnerability, risk, and documentation analyses and document findings.
• Support security assessment and authorization activities by preparing required packages, coordinating artifacts, tracking deficiencies, and resolving documentation issues.
• Maintain authorization-package status, milestones, dependencies, risks, issues, and outstanding actions.
• Support continuous-monitoring activities, including analysis and tracking of security controls, vulnerabilities, findings, remediation activities, and required evidence.
• Analyze vulnerability and security findings, document risk and remediation information, and track approved remediation activities.
• Support incident-response coordination, documentation, status tracking, evidence collection, technical-response activities within the authorized scope, and required reporting. Authorized Government officials retain responsibility for official incident-response direction, reporting determinations, and applicable risk decisions.
• Develop cybersecurity status reports, dashboards, briefings, risk summaries, and other required products. Coordinate cybersecurity activities with system owners, technical teams, privacy personnel, data personnel, project/program personnel, and applicable Government security stakeholders.
• Assess alignment with applicable NIST, FISMA, DHS, ICE, and other applicable cybersecurity requirements and document gaps and corrective actions.
• Maintain cybersecurity documentation in authorized Government repositories and systems.

• Demonstrated experience supporting Federal cybersecurity, information-security, Risk Management Framework, security-authorization, or continuous-monitoring activities.
• Knowledge of NIST cybersecurity standards and guidance, Federal information-security requirements, vulnerability management, security controls, and risk management.
• Ability to develop and maintain high-quality security-authorization and cybersecurity documentation.
• Ability to analyze security findings, vulnerabilities, evidence, and compliance requirements.
• Strong technical writing, analytical, organizational, coordination, and communication skills.
• Experience supporting Federal or similarly regulated information systems is preferred.
• Relevant industry-recognized cybersecurity certification is preferred.