Information Security Officer

Job Description

Job Description

Brief Overview of Position:

Strategic Operational Solutions (STOPSO) is seeking candidates for an Information Security Officer role to support a federal client where we are focused on delivering innovative operations and solutions through proven successful methods. The Information Security Officer serves as the designated Information System Security Officer (ISSO) and key personnel for the FTC CDPSS environment. This position provides cybersecurity leadership, compliance support, authorization support, continuous monitoring, vulnerability management, incident response coordination, and system security oversight for the FTC Bureau of Economics cloud analytics environment.

 

Responsibilities:

• Support FTC security policies and requirements.
• Coordinate authorization activities (ATO/ATU).
• Maintain system security documentation.
• Conduct and manage:
• Weekly vulnerability scans
• Monthly security reporting
• Security metrics reporting
• Audit artifact development
• Lead incident response activities.
• Support forensic investigations.
• Track and remediate identified vulnerabilities.
• Support compliance with:
• FISMA
• FedRAMP
• NIST 800-53
• NIST 800-207
• FTC security requirements
• Collaborate with program management, engineering, and data teams to ensure security is integrated across all solution components
• Serve as the designated Information System Security Officer (ISSO) and act as a primary point of contact for security-related audits, data calls, and compliance reviews

Minimum Qualifications

• Bachelor's degree in Cybersecurity, Information Security, Computer Science, Engineering, or related discipline.
• Minimum 5 years supporting federal cloud-security initiatives.
• Experience with Azure cloud environments.
• Experience supporting ATO activities and continuous monitoring.
• Required Certifications: Certified Information Systems Security Professional (CISSP) Certification, Certified Cloud Security Professional (CCSP) Certification, CompTIA Cloud+ Certification (or approved equivalent)