Information System Security Officer

Tharros supports the Department of Homeland Security (DHS) with cybersecurity services across its Intelligence Enterprise.

In support of this mission, we have an immediate opportunity for an Information System Security Officer (ISSO).

In this role you will independently own the security posture of a portfolio of DHS Intelligence Enterprise systems, including Cross Domain Solutions and cloud-hosted systems, in accordance with ICD 503 and DHS 4300C.

You will maintain ATO packages, manage POA&Ms and change control, and serve as a SCIF Information Security Compliance Representative (ISCR).

This position is on-site in a Government SCIF in Washington, DC.

Duties include but not limited to: Create and maintain ATO packages for assigned systems in the GRC tool and monitor their compliance.Perform self-assessments of assigned on-premise and cloud systems against the A&A SOP.Manage POA&Ms, waivers, and risk exceptions; provide weekly or bi-weekly activity reports.Perform audit log reviews at least weekly, respond to NOSC alerts, and ensure periodic scanning.Coordinate system changes through IATT requests and serve on the Configuration Management Board when designated.Facilitate annual contingency plan tests and submit quarterly CPEM reporting.Deliver ISSO reports (incident response, POA&M, ConMon metrics) to ISSMs and system owners.Serve as SCIF ISCR and mentor junior ISSOs.