Job Title: Information System Security Officer
Location: Remote
Summary: The project focuses on sustaining, enhancing, and modernizing the customers' Recruiting Information Support System to support large number of recruiters worldwide. It involves maintaining the legacy Oracle-based system while supporting the development and transition to Salesforce-based CRM. The effort addresses recruiting challenges through modern technology, data analytics, and improved system capabilities. A phased, carefully managed transition ensures uninterrupted recruiting operations while enabling long-term modernization.
Responsibilities:
Maintain the system's Authority to Operate (ATO) by fulfilling all requirements outlined in the NIST Risk Management Framework (RMF)
Conduct annual security control assessments and reviews, documenting findings and implementing corrective actions to address vulnerabilities
Manage all system documentation and artifacts within the eMASS system, ensuring accuracy and completeness
Develop and maintain the System Security Plan (SSP) and other required security documentation
Stay abreast of emerging threats and vulnerabilities, recommending and implementing security enhancements to mitigate risks
Requirements:
Minimum of 3 years of experience serving as an Information Assurance/ISSO in a regulated and compliant environment
NIST RMF, Security Control Assessments, eMASS, System Security Plan (SSP), Vulnerability Management
CISSP or CISM (IAM Level II) certification required