USACE Information System Security Officer (ISSO) Position Available In Mobile, Alabama

USACE Information System Security Officer (ISSO) Technology, Automation, and Management, Inc.

Mobile, AL Job Details Full-time Estimated:

$79.4K – $100K a year 2 days ago Qualifications Software development Cybersecurity Senior level RMF Full Job Description The ENGLink Technical Services contract provides essential development, maintenance, and support for the U.S. Army Corps of Engineers’ mission-critical emergency management system used to coordinate response activities during natural disasters and other contingency events nationwide. This contract requires expert management of software development, cybersecurity, training, and help desk functions to ensure continuous operation of a system that supports life-saving response efforts during emergency situations, including hurricanes, floods, wildfires, and other crisis events. The ISSO for ENGLink will play a critical role in ensuring the cybersecurity integrity of a system that supports life-saving emergency response operations. The candidate?s expertise will directly protect sensitive information that enables the U.S. Army Corps of Engineers to respond effectively to disasters and emergencies nationwide.

Responsibilities:

Ensure cybersecurity inspections, tests, and reviews are coordinated Maintain compliance with DoD, Army, and USACE security policies Manage ENGLink instances through all six phases of the DoD Risk Management Framework (RMF) process Perform System Owner Representative activities within ENGLink instances in eMASS Perform ISSM activities within ENGLink instances of eMASS Lead the development and implementation of the System Security Plan (SSP) Coordinate security control assessments and support security assessment reports Support security certification and accreditation processes Conduct security impact analyses for proposed system changes Oversee remediation of identified vulnerabilities Develop and implement Plans of Action and Milestones (POA&Ms) Manage the continuous monitoring strategy and ongoing authorization process Coordinate with the Authorizing Official (AO) and security control assessors Track and maintain ATO documentation and ensure timely renewal Prepare, distribute, and maintain plans (including system security documentation and network diagrams), instructions, guidance, and standard operating procedures concerning cybersecurity Generate and distribute security metrics and reports Recommend resource allocations required for secure operation and maintenance Participate in Information System risk assessments during the Assess and Authorize (A&A) process Develop cybersecurity requirements for hardware, software, and services Assist in gathering and preservation of evidence for computer crimes Ensure recovery processes are monitored and security features properly restored Maintain and review cybersecurity plans and report discrepancies Ensure all ISSO review items are tracked and reported within eMASS Identify alternative functional cybersecurity strategies Ensure cybersecurity inspections, tests, and reviews are coordinated Provide leadership in ensuring cybersecurity awareness and training Implement applicable DISA STIGs (Security Technical Implementation Guides) Monitor system performance for compliance with cybersecurity requirements