Information System Security Officer – Cloud Data Platform
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
Information System Security Officer responsible for cybersecurity and compliance in Microsoft Azure cloud platform for federal client. Leading security activities and ensuring compliance with federal frameworks.
Responsibilities:
- Serve as the designated Information System Security Officer (ISSO) and primary cybersecurity lead for the cloud data platform.
- Lead all security activities supporting the system's Authority to Operate (ATO) and ongoing authorization.
- Develop, maintain, and update security documentation including: System Security Plans (SSPs), POA&Ms, Risk Assessments, Security Assessment Reports (SARs), Continuous Monitoring artifacts.
- Support compliance with: FedRAMP Moderate, FISMA, NIST SP 800-53, NIST SP 800-207 (Zero Trust), FTC security policies.
- Implement and maintain cloud security controls within Microsoft Azure.
- Design and manage identity and access management using Microsoft Entra ID and RBAC.
- Configure and validate encryption for data at rest and in transit.
- Support vulnerability management, remediation planning, and security assessments.
- Coordinate monthly continuous monitoring activities and security metrics reporting.
- Conduct annual risk assessments and security control reviews.
- Support privacy documentation including PTAs and PIAs.
- Work closely with the Government Authorizing Official, System Owner, CISO, COR, and Continuous Assurance teams.
- Assist with incident response, forensic investigations, and security event analysis.
- Coordinate vulnerability scanning, penetration testing, and remediation activities.
- Participate in tabletop exercises, disaster recovery planning, and cyber resilience initiatives.
- Ensure cloud solutions comply with FedRAMP authorization boundaries and federal cybersecurity requirements.
- Provide technical guidance to cloud architects and engineering teams on secure cloud design and implementation.
Requirements:
- Minimum 5 years of experience performing ISSO or cloud cybersecurity responsibilities within federal cloud environments.
- Experience supporting Microsoft Azure cloud environments.
- Strong knowledge of: Cloud Security, Zero Trust Architecture, Identity and Access Management, RBAC, Encryption technologies, Data Loss Prevention (DLP), Vulnerability Management, Incident Response.
- Experience supporting: FedRAMP, FISMA, NIST 800-53, Continuous Monitoring, Risk Management Framework (RMF).
- Experience developing and maintaining ATO packages.
- Strong understanding of cloud security architecture and secure system design.
- Excellent written communication skills with experience producing executive-level security documentation.
- Required Certifications: Certified Information Systems Security Professional (CISSP), Certified Cloud Security Professional (CCSP), CompTIA Cloud+.
Benefits:
- Health insurance
- Professional development
Similar Jobs
Security Compliance Policy and Guide Writer
Seeking Security Compliance Policy and Guide Writer to document cybersecurity controls for government client. A role ensuring compliance with federal security requirements and producing operational documentation.
Information Systems Security Officer – Part-time
Information Systems Security Officer managing IT security and protecting sensitive information for federal clients. Leading risk management and compliance efforts while collaborating with various stakeholders.
Security & Compliance Engineer
Security & Compliance Engineer for ARGO-HYTOS Group. Ensuring information security and compliance in a global IT environment.
Virtual Chief Information Security Officer – vCISO
Virtual Chief Information Security Officer leading information security and compliance initiatives at a healthcare platform. Ensuring secure technology systems and serving as a strategic advisor to leadership.
Senior Security Engineer
Senior Security Engineer focused on securing infrastructure through technology deployment and incident response for a digital asset protection at ARC-One Solutions.
Azure Solutions, Security Architect
Azure Solutions Architect leading security-focused Azure cloud solutions at Ascend Technologies. Designing scalable architectures, ensuring compliance, and mentoring teams in Agile environments.
Presales Security Expert – National Partners
Presales Security Expert supporting and enabling Fortinet's Canadian partners with solutions and technical improvements. Involving multi-team collaboration and direct partner engagement for effective results.
Senior Information Security Engineer
Senior Information Security Engineer responsible for implementing security solutions for enterprise environments. Collaborating with teams to enhance security architecture and manage stakeholder relationships.
Intern, Blue Team
Internship position in Cyber Security at It4us focusing on Blue Team operations and security analysis. Supporting various tasks involving Linux, development, and threat monitoring.
Security Engineer – Client Consulting
Threat Protection Security Engineer at Cyclotron deploying Microsoft Defender and Sentinel for enterprise organizations. Collaborating with security engineers to improve protection of Microsoft-based assets in cloud and on-premises environments.
Security Controls Assessor – OSCAL, Part Time
Security Controls Assessor conducting security compliance assessments and reports for U.S. Government and Commercial clients. Required experience with OSCAL and NIST guidelines.
Security Controls Assessor
Security Controls Assessor developing compliance frameworks for federal clients using NIST, RMF, and FISMA. Conducting assessments and creating security plans with a focus on continuous improvement.
Senior Security Engineer
Senior Security Engineer managing Microsoft 365 security stack for compliance and threat detection. Collaborating cross-functionally to enhance security controls and respond to incidents.
Mid-level Cybersecurity Engineer
Cybersecurity Engineer focusing on offensive security and penetration testing in a fully remote role. Requiring extensive experience in web applications and modern environments.
AI Engineer – Offensive Security
AI Engineer designing and building LLM-powered systems for offensive security work. Collaborating on agent architecture and integration of security tools in a remote setting.
Senior Strategic Account Manager, Data Center – Security
Strategic Account Manager for integrated security solutions at Johnson Controls. Focused on expanding relationships with contractors and driving revenue growth in security systems.
Network Security Architect, Cybersecurity Expert, Palo Alto certified
Senior Network Engineer specializing in Palo Alto security solutions for Kapres Technology. Working fully remote from Morocco with expertise in Fortinet and cybersecurity.
Security and Compliance Manager
Security and Compliance Manager overseeing compliance and assurance at Semaphore. Ensuring audit readiness and maintaining security processes within a remote-first software company.
Security Alignment Engineer
Security Alignment Engineer safeguarding clients' IT infrastructure at Onsite Logic. Conducting audits, providing technical support, and enhancing security posture for clients.
Network Security Engineer
Network Security Engineer focusing on architecture and engineering for network security with Zero Trust principles. Involves Zscaler environments, firewall management, and collaboration with architects and SOC teams.