Cybersecurity - Information Systems Security Officer (ISSO)
Job Description:
Primary cybersecurity advisor to an application development team and executive stakeholders on Assessment and Authorization (A&A) activities. Provides end-to-end A&A support for DoD cybersecurity, privacy, and financial controls implementation, testing, monitoring, and enforcement. Interprets risks and recommends approaches to meeting DoD compliance and cybersecurity requirements in accordance with NIST Risk Management Framework (RMF) Controls and DoD Policy.
Responsibilities include:
- Oversees controls implementation and development of Authorization to Operate (ATO) artifacts
- Conducts controls testing and periodic self-assessments to ensure assessment readiness
- Manages and updates the Enterprise Mission Assurance Support Service (eMASS) tool
- Establishes, coordinates, implements, and enforces the Information Security Program
- Performs security, privacy, and change control reviews and provides risk recommendations
- Interprets controls requirements and provides cybersecurity guidance to the broader team
- Verifies user account access and security and awareness training compliance
- Provides guidance on Business Continuity/Disaster Recovery activities and exercises
- Supports cyber requirements development for project teams
- Coordinates cybersecurity related Integrated Master Schedule (IMS) tasks and synchronizes workflows, reports, and artifact tracking with ATO deliverables
Basic Qualifications:
- 4 years experience
- BA or BS degree
- U.S. Citizenship required
- Top Secret – SCI clearance with eligibility for CI-Poly
- Must be located within the National Capital Region and able to commute daily to Arlington, VA
- DoD 8570/8140 IAT Level II certified; SANS, ITIL, CRISC, CCSK, CNSS, Knowledge Management and Project Management certifications are also a plus
Experience:
- Experienced in mapping, implementing, interpreting, and documenting RMF security controls
- Experienced managing the eMASS cybersecurity management tool
- Experience developing and submitting at least six (6) ATO packages
- Two (2) or more years of experience as an IT administrator/engineer, Information Systems Security Engineer (ISSE), Information Systems Security (ISSO) or Security Controls Assessor (SCA) are preferred
- Familiarity with CMMI, CMMC, ITIL and/or project management practices are a plus
- Initiative taking problem solver who can work independently or with a team and present findings to executive staff
- Well organized and detail oriented with excellent writing, verbal, and soft skills
- Able to quickly parse through large datasets in Microsoft Excel using scripts or other methods
- Able to accurately summarize and translate cybersecurity requirements into key action items for senior executives and IT Operations teams
- Proficient with Microsoft Office, PowerPoint, Excel, Word, Visio, and Project
This role requires you to be working onsite a minimum of 3 days per week.
How you'll grow
At Deloitte, our professional development plan focuses on helping people at every level of their career to identify and use their strengths to do their best work every day. From entry-level employees to senior leaders, we believe there’s always room to learn. We offer opportunities to help sharpen skills in addition to hands-on experience in the global, fast-changing business world. From on-the-job learning experiences to formal development programs, our professionals have a variety of opportunities to continue to grow throughout their career.
Recruiting tips
From developing a stand out resume to putting your best foot forward in the interview, we want you to feel prepared and confident as you explore opportunities at Deloitte. Check out recruiting tips from Deloitte recruiters.
Benefits
At Deloitte, we know that great people make a great organization. We value our people and offer employees a broad range of benefits. Learn more about what working at Deloitte can mean for you.
Our people and culture
Our diverse, equitable, and inclusive culture empowers our people to be who they are, contribute their unique perspectives, and make a difference individually and collectively. It enables us to leverage different ideas and perspectives, and bring more creativity and innovation to help solve our client most complex challenges. This makes Deloitte one of the most rewarding places to work. Learn more about our inclusive culture.
Professional development
From entry-level employees to senior leaders, we believe there’s always room to learn. We offer opportunities to build new skills, take on leadership opportunities and connect and grow through mentorship. From on-the-job learning experiences to formal development programs, our professionals have a variety of opportunities to continue to grow throughout their career.