information security officer

LUNA PR

<p><b>Chief Information Security Officer (CISO)</b></p><p><b>Office Location: Dubai</b></p><p><b>Work Arrangement: Remote</b></p><p>This role is designed for a strategic leader who thrives at the intersection of modern engineering velocity and institutional grade risk management. Reporting directly to the C Suite [COO/CFO] with a dotted line to the Board of Directors, you will have the authority to build a defensible, automated security program that serves as a core business enabler.</p><p><b>Key Responsibilities</b></p><p>1. Regulatory Ownership and Executive Governance</p><ul><li>Designated Authority: Serve as the CISO responsible for the cybersecurity program in accordance with NYDFS Part 500 requirements, overseeing comprehensive annual risk assessments and managing the annual certification of compliance process.</li><li>SEC and Public Market Readiness: Lead the organizational process for determining the materiality of cybersecurity incidents and oversee the timely preparation of all required disclosures and filings in accordance with public market regulations and governance standards.</li><li>Board Stewardship: Provide quarterly Material Security Risk briefings to the Audit Committee, translating complex infrastructure threats into actionable business risk metrics.</li><li>Global Awareness (Preference): Maintain a preference for experience with global mandates (e.g., EU DORA, UK FCA, GDPR) to support international settlement expansion.</li></ul><p>2. AI Governance and Stablecoin Infrastructure</p><ul><li>Agentic AI Security: Establish the governance and security framework for autonomous AI agents, ensuring programmable money movement is resilient against prompt injection, model poisoning, and unauthorized agentic transactions.</li><li>Stablecoin Settlement Defense: Oversee the security of the end-to-end stablecoin lifecycle, ensuring the cryptographic integrity of minting/burning protocols and the security of reserve management interfaces.</li><li>Identity-First (Zero Trust): Architect a comprehensive security model that applies consistent rigor to both human and non-human identities, implementing modern phishing resistant authentication and zero trust principles across the enterprise.</li><li>Continuous Compliance: Transition from manual GRC to Continuous Controls Monitoring (CCM), where audit evidence is generated in real time through Policy as Code.</li></ul><p>3. Security Engineering and DevSecOps</p><ul><li>Seamless Security (Shift Left): Foster a culture where security is built in from the start. You will replace manual gatekeeping with automated guardrails integrated into the development process, allowing engineers to ship securely without losing speed.</li><li>Smart Risk Management: Move beyond long lists of vulnerabilities. You will implement a process that prioritizes fixes based on real world impact, ensuring engineering teams spend their time on the risks that threaten our environment.</li></ul><p>4. Operational Leadership and Resilience</p><ul><li>Incident Response and Tabletops: Own the global Incident Response and Business Continuity plans; lead high stakes tabletop exercises simulating systemic financial failures and AI driven fraud.</li><li>Third Party Risk (TPRM): Manage the security lifecycle of critical banking and ICT partners, moving beyond point in time assessments to continuous, data driven vendor monitoring.</li><li>Talent Development: Lead, develop, and motivate a team of subject matter experts in a distributed, remote-first environment.</li></ul><p><b>Qualifications and Experience</b></p><ul><li>The Standard: CISSP required, or a demonstrably equivalent executive credential (CISM, CCISO, or CISA).</li><li><b>Financial Pedigree: 12+ years in Information Security,</b> with significant experience in a NYDFS regulated or SEC reporting environment.</li><li>Infrastructure Depth: Proven success in distributed, cloud driven (AWS/GCP) organizations. Experience with stablecoin protocols or AI driven financial tools is a strong advantage.</li><li>Preferred Education and Certifications: <b>Master&rsquo;s degree (Cybersecurity, MIS, or MBA) </b>and/or senior-level professional designations like GSLC or equivalent executive cybersecurity leadership training.</li></ul><p><b>Leadership and Soft Skills</b></p><ul><li>Strategic and Lateral Thinker: Ability to recognize the potential of regulatory frameworks as tools for continuous improvement.</li><li>Operational Resolve: Capable of leading the difficult conversations where business speed and regulatory safety conflict.</li><li>Agile Leadership: Proven ability to lead through ambiguity and rapid change. You are a decisive leader who can pivot strategies in real time based on shifting market conditions while maintaining team focus on high priority outcomes.</li><li>Collaborative Leader: A sophisticated approach to motivating subject matter experts in a remote-first, high-growth environment.</li></ul><p>Job Type: Full-time</p>

Chief Information Security Officer

HugoBank

<div><p>As the Chief Information Security Officer (CISO) for HugoBank, a cloud-native digital bank operating in Pakistan, one will play a pivotal leadership role in safeguarding the bank&rsquo;s digital ecosystem. The CISO is responsible for defining and executing the enterprise information security strategy, managing cyber and technology risks, and ensuring compliance with applicable regulatory and supervisory requirements. This role ensures the confidentiality, integrity, and availability of customer data, critical systems, and bank assets across cloud (AWS), on-premises, and third-party environments.</p><p></p><p><b>
DUTIES &amp; RESPONSIBILITIES:</b></p><p></p><p>
Information Security Strategy &amp; Governance</p><ul><li>
Define and execute the bank&rsquo;s enterprise information security strategy and governance framework, ensuring alignment with business objectives, cloud-native architecture, and regulatory requirements.</li><li>
Provide oversight and reporting of information security risks, controls, and posture to senior management and the Board, embedding security into enterprise risk management and decision-making.</li></ul><p>
Risk Management &amp; Compliance</p><ul><li>
Identify, assess, and prioritize security risks, implementing measures to mitigate vulnerabilities.</li><li>
Ensure ongoing compliance with applicable regulatory, legal, and industry requirements, and act as the primary interface for information security matters with regulators, auditors, and internal risk and compliance functions.</li></ul><p>
Security Operations</p><ul><li>
Oversee day-to-day security operations including incident response, threat detection, and vulnerability management.</li><li>
Develop and maintain an incident response plan to ensure timely and effective handling of security incidents or breaches.</li></ul><p>
Security Architecture &amp; Vendor Management</p><ul><li>
Define and govern the bank&rsquo;s security architecture, ensuring secure-by-design controls across cloud-native platforms, applications, infrastructure, and data environments.</li><li>
Oversee third-party and vendor security risk management, including due diligence, onboarding, continuous monitoring, and contractual security obligations for critical and outsourced services.</li></ul><p>
Security Awareness &amp; Culture</p><ul><li>
To promote a culture of security awareness through training and communication, embedding security responsibility across the organization.</li></ul><p>
Budget &amp; Resource Management</p><ul><li>
Manage the cybersecurity budget, ensuring efficient allocation and utilization of resources.</li></ul><p>
Access Management &amp; Controls</p><ul><li>
Define and enforce access management policies, including user-provisioning, de-provisioning and privileged access controls.</li><li>
Implement and maintain a trusted software list, regularly reviewing and updating controls.</li><li>
Evaluate employee software requests and ensure all tools meet internal security standards.
</li></ul><p>Security tools and the evolving ecosystem</p><ul><li>
Define and continuously evolve the bank&rsquo;s information security tooling and platforms (e.g., IAM, SIEM/SOC, EDR/XDR, PAM, DLP, cloud security, application security), ensuring effective coverage, integration, and scalability as the bank grows.</li></ul><p></p><p><b>
ROLE RELATIONSHIP:</b></p><p></p><p><b>
Internal</b></p><ul><li>
Executive Leadership</li><li>
IT and Operation Teams</li><li>
Compliance and Risk Management</li><li>
Internal Audit</li></ul><p><b>
External</b></p><ul><li>
Regulatory Authorities (SBP)</li><li>
Security Vendors and Consultants</li><li>
Third-Party Partners &amp; Auditors</li></ul><br>
<b>
Requirements</b><br>
<p></p><ul><li>
Bachelor&rsquo;s or Master&rsquo;s degree in Information Security, Cybersecurity, or related field.
</li></ul><ul><li>Industry certifications such as CISSP, CISM, or CISA are highly desirable.
</li><li>Minimum 15 years of experience in Information Security or related domains.</li><li>
Proven leadership experience in senior information security roles, preferably in the financial sector.</li><li>
In-depth knowledge of cybersecurity principles, technologies, and regulatory frameworks.</li><li>
Banking or FinTech experience prefered</li></ul></div>

Chief Information Security Officer (CISO)

<div>
 As the Chief Information Security Officer (CISO) for HugoBank, a cloud-native digital bank operating in Pakistan, one will play a pivotal leadership role in safeguarding the bank's digital ecosystem. The CISO is responsible for defining and executing the enterprise information security strategy, managing cyber and technology risks, and ensuring compliance with applicable regulatory and supervisory requirements. This role ensures the confidentiality, integrity, and availability of customer data, critical systems, and bank assets across cloud (AWS), on-premises, and third-party environments.
 <br/>
 <br/>
 <strong>
  DUTIES &amp; RESPONSIBILITIES:
  <br/>
  <br/>
 </strong>
 Information Security Strategy &amp; Governance
 <br/>
 <br/>
 <ul>
  <li>
   Define and execute the bank's enterprise information security strategy and governance framework, ensuring alignment with business objectives, cloud-native architecture, and regulatory requirements
  </li>
  <li>
   Provide oversight and reporting of information security risks, controls, and posture to senior management and the Board, embedding security into enterprise risk management and decision-making
   <br/>
   <br/>
  </li>
 </ul>
 Risk Management &amp; Compliance
 <br/>
 <br/>
 <ul>
  <li>
   Identify, assess, and prioritize security risks, implementing measures to mitigate vulnerabilities
  </li>
  <li>
   Ensure ongoing compliance with applicable regulatory, legal, and industry requirements, and act as the primary interface for information security matters with regulators, auditors, and internal risk and compliance functions
   <br/>
   <br/>
  </li>
 </ul>
 Security Operations
 <br/>
 <br/>
 <ul>
  <li>
   Oversee day-to-day security operations including incident response, threat detection, and vulnerability management
  </li>
  <li>
   Develop and maintain an incident response plan to ensure timely and effective handling of security incidents or breaches
   <br/>
   <br/>
  </li>
 </ul>
 Security Architecture &amp; Vendor Management
 <br/>
 <br/>
 <ul>
  <li>
   Define and govern the bank's security architecture, ensuring secure-by-design controls across cloud-native platforms, applications, infrastructure, and data environments
  </li>
  <li>
   Oversee third-party and vendor security risk management, including due diligence, onboarding, continuous monitoring, and contractual security obligations for critical and outsourced services
   <br/>
   <br/>
  </li>
 </ul>
 Security Awareness &amp; Culture
 <br/>
 <br/>
 <ul>
  <li>
   To promote a culture of security awareness through training and communication, embedding security responsibility across the organization
   <br/>
   <br/>
  </li>
 </ul>
 Budget &amp; Resource Management
 <br/>
 <br/>
 <ul>
  <li>
   Manage the cybersecurity budget, ensuring efficient allocation and utilization of resources
   <br/>
   <br/>
  </li>
 </ul>
 Access Management &amp; Controls
 <br/>
 <br/>
 <ul>
  <li>
   Define and enforce access management policies, including user-provisioning, de-provisioning and privileged access controls
  </li>
  <li>
   Implement and maintain a trusted software list, regularly reviewing and updating controls
  </li>
  <li>
   Evaluate employee software requests and ensure all tools meet internal security standards.
   <br/>
   <br/>
  </li>
 </ul>
 Security tools and the evolving ecosystem
 <br/>
 <br/>
 <ul>
  <li>
   Define and continuously evolve the bank's information security tooling and platforms (e.g., IAM, SIEM/SOC, EDR/XDR, PAM, DLP, cloud security, application security), ensuring effective coverage, integration, and scalability as the bank grows
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  ROLE RELATIONSHIP:
  <br/>
  <br/>
 </strong>
 <strong>
  Internal
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Executive Leadership
  </li>
  <li>
   IT and Operation Teams
  </li>
  <li>
   Compliance and Risk Management
  </li>
  <li>
   Internal Audit
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  External
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Regulatory Authorities (SBP)
  </li>
  <li>
   Security Vendors and Consultants
  </li>
  <li>
   Third-Party Partners &amp; Auditors
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Requirements
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Bachelor's or Master's degree in Information Security, Cybersecurity, or related field.
  </li>
  <li>
   Industry certifications such as CISSP, CISM, or CISA are highly desirable.
  </li>
  <li>
   Minimum 15 years of experience in Information Security or related domains
  </li>
  <li>
   Proven leadership experience in senior information security roles, preferably in the financial sector
  </li>
  <li>
   In-depth knowledge of cybersecurity principles, technologies, and regulatory frameworks
  </li>
  <li>
   Banking or FinTech experience prefered
  </li>
 </ul>
</div>


FirstBank Southwest

<p></p><div><div><p><b>Job Summary: </b>Responsible for establishing and maintaining the bank&rsquo;s information security strategy, policies, and programs to protect information assets, customer data, and financial transactions from cyber threats.</p><p>
</p><p><b>Education/Experience: </b>A minimum of the following education/experience is required:</p><ul><li>
Bachelor&rsquo;s degree in Cyber Security, Information Technology, Computer Science plus 5+ years experience; OR</li><li>
Master&rsquo;s degree in Cyber Security, Information Technology, Computer Science</li></ul><p>
</p><p><b>Job Specific Responsibilities:</b></p><ul><li>
Develops and implements a comprehensive information security strategy aligned with the bank&rsquo;s objectives.</li><li>
Establishes and enforces information security policies, procedures, and best practices.</li><li>
Provides strategic security guidance to executive leadership and the board of directors.</li><li>
Leads the development and execution of cybersecurity initiatives to mitigate risks.</li><li>
Identifies, assesses, and manages cybersecurity risks across the organization.</li><li>
Ensures compliance with relevant regulations (e.g., GLBA, FFIEC) and industry standards.</li><li>
Oversee audits, risk assessments, and security testing to identify vulnerabilities.</li><li>
Collaborates with legal and compliance teams to address cybersecurity-related legal and regulatory requirements.</li><li>
Implements security monitoring, threat detection, and response mechanisms.</li><li>
Leads incident response efforts and coordinate with law enforcement and regulatory agencies during security breaches.</li><li>
Oversees security awareness training for employees and ensures adherence to security policies.</li><li>
Oversees the deployment and maintenance of security technologies, including firewalls, intrusion detection systems, and encryption.</li><li>
Ensures secure design and architecture of digital banking systems, ATMs and payment networks.</li><li>
Collaborates with IT teams to integrate security into IT infrastructure and cloud computing strategies.</li><li>
Enforces identity and access management policies.</li><li>
Conducts regular access reviews to ensure compliance and minimize risks.</li><li>
Oversees bank&rsquo;s IDP and works to improve and secure authentication.</li><li>
Conducts regular asset and threat-based risk assessments and provide reports to executive management.
</li><li>Recommends and tracks implementation/compliance with security baselines.</li><li>
Leads Vendor Management program by evaluating risk of vendors, establishing controls, and working with vendor owners to perform due diligence reviews.</li><li>
Leads Business Continuity Program to ensure continued bank resilience and availability.</li><li>
Other duties as assigned.</li></ul></div><div>
</div><div><b>Required Technical Knowledge:
</b></div><ul><li>General computer skills</li><li>
Microsoft Office, specifically Word and Excel
</li><li>CISSP or other Technical Certifications preferred
</li></ul><p></p><p><b>Expectations of an Employee:</b></p><ul><li>
Works well independently</li><li>
Treats all customers and fellow employees with respect</li><li>
Exceeds customer expectations</li><li>
Meets customer needs</li><li>
Maintain confidentiality of all bank records</li><li>
Conducts interactions with honest, ethical, and strong moral principles</li><li>
Performs at the highest level</li><li>
Takes responsibility for actions</li><li>
Does what is expected</li><li>
Leads by example and takes initiative</li><li>
Works as a team</li><li>
Efficiently shares information in a collaborating and proactive manner</li><li>
Pays attention to detail</li><li>
Solves problems</li><li>
Makes sound decisions</li><li>
Manages time effectively</li><li>
Prioritizes effectively</li><li>
Performs multiple tasks simultaneously</li><li>
Shows up for work and is on time</li><li>
Complies with all laws and regulations</li><li>
Completes all required training</li><li>
Adheres to Bank Values</li></ul><p>
</p><p><b>Supervisory Responsibilities: </b>Supervises Information Security Specialist position.</p><p>
</p><p><b>Amount of Travel: </b>Occasional, up to 10 % for TBA IT &amp; Security Forums, FS-ISAC conferences, and industry events.</p><p>
</p><p><b>Physical Requirements:</b></p><ul><li>
May need to sit/stand for long periods of time</li><li>
Sustained visual concentration while working at the computer</li><li>
Typing on a keyboard for long periods of time</li><li>
Handle high stress environment</li><li>
Maintain professional appearance</li></ul><p><b><br>
Benefits Include:</b></p><ul><li>
Medical, Rx, Dental, and Vision insurance
</li><li>HSA, FSA, and Limited FSA
</li><li>Employer paid and voluntary Life Insurance/AD&amp;D
</li><li>Short-Term Disability</li><li>
Long-Term Disability</li><li>
Accident/Hospital Indemnity/Critical Illness voluntary plans</li><li>
Identify Theft Protection</li><li>
401k with employer match</li><li>
Vacation, Sick Leave, and Holiday pay</li><li>
Tuition Reimbursement</li><li>
Gym membership discounts</li><li>
Annual payrate increases</li><li>
Incentive based bonuses</li></ul><p>
</p><p><i>It is the policy of FirstBank Southwest to provide equal opportunity employment (EOE) to all persons regardless of age, color, national origin, citizenship status, physical or mental disability, race, religion, creed, gender, sex, sexual orientation, gender identity and/or expression, genetic information, marital status, status with regard to public assistance, veteran status, or any other characteristic protected by federal, state, or local law. In addition, FirstBank Southwest will provide reasonable accommodations for qualified individuals with disabilities. FirstBank Southwest is an affirmative action employer.</i></p></div><p></p>

San Joaquin County

Agency Information Security Officer - Healthcare Services

Steampunk

<div>Overview:
<div><b>
Steampunk </b>is searching for a <b>Principal Information System Security Officer</b> to support a government customer. The primary responsibilities for the position are to support all activities that ensure the level of security documented with the security authorization is maintained at an acceptable level of risk. The nature of the work requires that the candidate demonstrate initiative, organization, responsibility, customer service skills, and the ability to be flexible and adaptive to a fast-paced, fluid business environment. The candidate must be able to communicate effectively and decisively with all levels of the organization and be able to solve practical problems as well as exercise sound judgement with regards to sensitive and confidential information.</div>
Contributions:
<ul><li>Proactively create, monitor and update the status of POA&amp;Ms to ensure weaknesses are resolved in accordance to their scheduled completion dates.</li><li>
Create of Waivers or Risk Acceptance Memos to assist in the effective management of system risks.</li><li>
Conduct an annual assessment in accordance with guidance in the DHS Information Security Performance Plan.</li><li>
Review and update security authorization documents as needed, but at least annually;</li><li>
Conduct Contingency Plan tests at least annually and updating the plan;</li><li>
Perform system self-assessments as part of the customer's Ongoing Authorization program;</li><li>
Monitor and respond to Information Security Vulnerability Management (ISVM)/Patch Management.</li><li>
Provide audit support for assigned systems (Financial, A-123, FISMA, internal, DHS, etc.), throughout the audit (Pre, During, and Post Audit).</li><li>
Maintain knowledge of inventory in accreditation boundary.</li><li>
Use DHS&rsquo; and mandated enterprise IA Compliance Tools.</li><li>
Devise a plan to certify and accredit their assigned Information system or information systems.</li><li>
Respond to emerging requirements or policies as set by legislation, regulation or policy.</li><li>
Participate in DevOps Sec (security integrated into Agile processes) requirements for assigned systems.</li><li>
Support the review and update security authorization documents as needed, but at least annually;</li><li>
Help coordinate with Privacy, Records, and Information Governance Divisions related to compliance documentation and other requirements.</li><li>
Provide audit support for assigned systems (Financial, A-123, FISMA, internal, DHS, etc.), throughout the audit (Pre, During, and Post Audit).</li><li>
Proactively ensure security requirements are included in development cycle (Waterfall, Agile, SecDevOPs).</li><li>
Use DHS&rsquo; and mandated enterprise IA Compliance Tools.</li><li>
Ensure CM processes are followed to ensure that any changes do not introduce new security risks.</li><li>
Support the management system Information Security Vulnerability Management (ISVM) Compliance.</li><li>
Experience leading a team of ISSOs</li></ul>
Qualifications:<br>
<div></div><ul><li>
Bachelor&rsquo;s Degree and 8 years of cybersecurity experience; which must be FISMA-related OR<ul><li>
No degree and 12 years of cybersecurity experience; 10 of which must be FISMA-related OR</li><li>
Master&rsquo;s Degree in an IT field and 6 years of cybersecurity experience; which must be FISMA-related</li></ul></li><li>
Must possess one of the following certifications:<ul><li>
Certified Information System Security Professional (CISSP)</li><li>
CompTIA Advanced Security Practitioner (CASP)</li><li>
 Certified Information Systems Auditor (CISA)</li><li>
 Certified Information Security Manager (CISM)</li><li>
Systems Security Certified Practitioner (SSCP)</li><li>
GIAC Information Security Professional (GISP)</li><li>
 GIAC Security Leadership (GSLC)</li></ul></li></ul><ul><li>
Applies extensive knowledge of a variety of the IA field&rsquo;s concepts, practices, and procedures to ensure the secure integration and operation of all systems</li><li>
Extensive specialized knowledge of financial audit standards, classified system IA requirements and Privacy Act requirements</li><li>
Specialized knowledge and experience with the implementation of the NIST Special Publication (SP) 800 family of publications, particularly those associated with the Risk Management Framework.</li><li>
Specialized knowledge and experience with evaluating system, network, or infrastructure security controls against requirements such as FISMA, FIPS, and NIST guidelines Knowledge and experience with the vulnerability scanning execution, assessment, and analysis</li><li>
Knowledge and experience with the operating system and network knowledge (i.e., Local Area Networks [LAN] and Wide Area Networks [WAN])</li><li>
Knowledge and experience with application security, database security, and network security</li><li>
Knowledge and experience with the vulnerability scanning, assessment, and analysis</li><li>
Knowledge and experience with the information security and assurance principles (e.g., Defense-in-depth) and associated supporting technologies</li><li>
Ability to assess and weigh current and evolving security threats in an operational environment</li></ul><div><b>
Preferred Skills</b></div><ul><li>
Current experience providing ISSO support to DHS</li><li>
Experience supporting systems hosted in Cloud environments.</li><li>
Experience supporting systems in Agile and DevOps environments.</li></ul>
About <b>steampunk</b>:
<div>
Steampunk relies on several factors to determine salary, including but not limited to geographic location, contractual requirements, education, knowledge, skills, competencies, and experience. The projected compensation range for this position is $120,000 to $145,000. The estimate displayed represents a typical annual salary range for this position. Annual salary is just one aspect of Steampunk&rsquo;s total compensation package for employees. Learn more about additional Steampunk benefits here.</div><div></div><div><b><br>
Identity Statement</b></div><div>
As part of the application process, you are expected to be on camera during interviews and assessments. We reserve the right to take your picture to verify your identity and prevent fraud.</div><div></div><div><br>
Steampunk is a <b>Change Agent</b> in the Federal contracting industry, bringing new thinking to clients in the Homeland, Federal Civilian, Health and DoD sectors. Through our <b>Human-Centered delivery methodology</b>, we are fundamentally changing the expectations our Federal clients have for true shared accountability in solving their toughest mission challenges. As an <b>employee owned company</b>, we focus on investing in our employees to enable them to do the greatest work of their careers &ndash; and rewarding them for outstanding contributions to our growth. If you want to learn more about our story, visit http://www.steampunk.com.</div><div></div><div><i><br>
We are an equal opportunity employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability status, protected veteran status, or any other characteristic protected by law. Steampunk participates in the E-Verify program.</i></div></div>

Principal Information Systems Security Officer

Contact Government Services, LLC

<div><div>ISSO</div><div>
Employment Type: Full-Time, Experienced</div><div>
Department: Information Technology</div><div></div><div><br>
CGS is seeking an Information Systems Security Officer (ISSO) with DIACAP and/or RMF experience who has deep expertise in security assessment documentation to support Dept. of Commerce systems and efforts to achieve their Authorization to Operate (ATO). This position is located at the client site in the Herbert Hoover building in Washington, DC. The scope of this position includes full life-cycle Assessment and Authorization (A&amp;A) management through all 6 Steps of the RMF process in support of the Government ISSM.In this role, you&rsquo;ll conduct security assessment, and information system security oversight activities in accordance with NIST 800.53 that support systems from the perspective RMF requirements.<br>
</div><div></div><br>
<div>CGS brings motivated, highly skilled, and creative people together to solve the government&rsquo;s most dynamic problems with cutting-edge technology. To carry out our mission, we are seeking candidates who are excited to contribute to government innovation, appreciate collaboration, and can anticipate the needs of others. Here at CGS, we offer an environment in which our employees feel supported, and we encourage professional growth through various learning opportunities.</div><div></div><div><br>
Skills and attributes for success:</div><ul><li>Review systems to identify potential security weaknesses and recommend improvements to amend vulnerabilities, implement changes, and document upgrades.</li><li>Maintain responsibility for managing cybersecurity risk from an organizational perspective.</li><li>Identify organizational risks, prioritize those risks, and maintain a risk registry for escalating and presenting those risks to senior leadership.</li><li>Provide security guidance and IS validation using the National Institute of Standards and Technology (NIST) RMF, DoC, and local security policies.</li><li>Providing configuration management (CM) recommendations for information system security software, hardware, and firmware and coordinating changes and modifications with the ISSM, Security Control Assessor (SCA), and Authorizing Official (AO).</li><li>Maintain vulnerability scanning tool compliance, such as HBSS or ACAS, and patch management, such as IAVM to ensure IT staff pushes patches to all systems in an effort to maintain compliance with all applicable directives, manage system changes, and assess the security impact of those changes.</li><li>Support security authorization activities, including transitioning from the legacy Information Assurance Certification and Accreditation Process (DIACAP) to compliance with the DoC RMF.</li><li>Provide subject matter expertise for cyber security and trusted system technology.</li><li>Apply advanced technical knowledge and analysis of specialized functional areas in task requirements to develop solutions to complex problems.</li><li>Research, write, review, disposition feedback, and finalize recommendations regarding cyber security policy, assessment and authorization assessments (A&amp;As), security test and evaluation reports, and security engineering practices and processes.</li><li>Conduct research and write risk assessment reports to include risk thresholds, evaluation, and scoring.</li><li>Support analysis of the findings and provide expert technical guidance for mitigation strategies, including implementation advice on the cyber security risk findings, and other complex problems.</li></ul><div></div><div><br>
Qualifications:</div><ul><li>Bachelor&rsquo;s Degree.</li><li>A minimum of five (5) years experience as an Information Assurance (IA) Analyst, ISSE, ISSO, or similar role in ATO package development, including generating security documentation for requirements, security control assessment, STIG and IAVA compliance, Standard Operating Procedures, test results, etc.</li><li>eMASS experience.</li><li>Professional security certification such as: CCNA Security, CySA+, GICSP, GSEC, CompTIA Security+ CE, SSCP, or higher.</li><li>Strong desktop publishing skills using Microsoft Word and Excel.</li><li>Experience with industry writing styles such as grammar, sentence form, and structure.</li><li>Ability to multi-task in a deadline-oriented environment.</li></ul><div></div><div><br>
Ideally, you will also have:</div><ul><li>CISSP, CASP, or a similar certificate is preferred.</li><li>Master's Degree in Cybersecurity or related field.</li><li>Strong initiative, detail orientation, organizational skills, and aptitude for analytical thinking.</li><li>Demonstrated ability to work well independently and as a part of a team.</li><li>Excellent work ethic and a high commitment to quality.</li></ul><div></div><div><br>
Our Commitment:</div><div>
Contact Government Services (CGS) strives to simplify and enhance government bureaucracy through the optimization of human, technical, and financial resources. We combine cutting-edge technology with world-class personnel to deliver customized solutions that fit our client&rsquo;s specific needs. We are committed to solving the most challenging and dynamic problems.</div><div></div><div><br>
For the past seven years, we&rsquo;ve been growing our government contracting portfolio, and along the way, we&rsquo;ve created valuable partnerships by demonstrating a commitment to honesty, professionalism, and quality work.</div><div></div><div><br>
Here at CGS we value honesty through hard work and self-awareness, professionalism in all we do, and to deliver the best quality to our consumers mending those relations for years to come.</div><div></div><div><br>
We care about our employees. Therefore, we offer a comprehensive benefits package.</div><div>
Health, Dental, and Vision</div><div>
Life Insurance</div><div>
401k</div><div>
Flexible Spending Account (Health, Dependent Care, and Commuter)</div><div>
Paid Time Off and Observance of State/Federal Holidays</div><div></div><div><br>
Contact Government Services, LLC is an Equal Opportunity Employer. Applicants will be considered without regard to their race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.</div><div></div><div><br>
Join our team and become part of government innovation!</div><div>
Explore additional job opportunities with CGS on our Job Board:</div><div>
https://cgsfederal.com/join-our-team/</div><div>
For more information about CGS please visit: https://www.cgsfederal.com or contact:</div><div>
Email: info@cgsfederal.com</div><div></div><div><br>
#CJ</div>
<p>
We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.</p></div>

Information Systems Security Officer (ISSO)

Search 10000+ Information security officer jobs near you this March. New roles added regularly across leading industries. Apply today.

10000 information security officer jobs Near Me

Chief Information Security Officer

Chief Information Security Officer (CISO)

Chief Information Security Officer (CISO)

Chief Information Security Officer

Agency Information Security Officer - Healthcare Services

Principal Information Systems Security Officer

Information Systems Security Officer (ISSO)