cFocus Software Incorporated · 18 hours ago
HHS - Jr. ISSO
cFocus Software Incorporated is seeking a Jr. ISSO to support the Department of Health and Human Services. This role involves serving as a primary security advisor, developing and maintaining RMF artifacts, and ensuring compliance with various cybersecurity policies.
ChatbotGovernmentInformation TechnologySoftware
Responsibilities
Serve as the primary security advisor to System Owners, ISSOs, and program leadership
Develop, review, and maintain RMF artifacts including SSPs, SARs, POA&Ms, Continuous Monitoring Plans, BIAs, and Contingency Plans
Ensure accurate and timely entry of system security data into the HRSA eGRC platform
Manage POA&M development, prioritization, tracking, and closure in coordination with stakeholders
Prepare systems for initial ATOs, annual assessments, and ongoing authorization activities
Support Security Control Assessments (SCAs) and remediate findings in coordination with assessors
Develop Risk-Based Decisions (RBDs) and support Authorizing Official (AO) adjudication
Maintain acceptable CPIC dashboard scores and support corrective actions
Ensure compliance with FISMA, OMB A-130, HHS, and HRSA cybersecurity policies
Support vulnerability management, incident response, and configuration management activities
Provide mentoring and technical guidance to junior ISSOs and RMF analysts
Develop and maintain system security SOPs, workflows, and documentation
Prepare executive briefings, metrics, and reports on system security posture and risk
Qualification
Required
Bachelor's degree in Cybersecurity, Information Technology, or related field
Minimum 5+ years of experience supporting federal RMF and ISSO functions
Expert knowledge of NIST SP 800-37, NIST SP 800-53, NIST SP 800-53A, and FISMA requirements
Hands-on experience supporting ATOs, continuous monitoring, and eGRC tools (e.g., RSA Archer)
Experience supporting systems containing PII and moderate/high impact data
Strong written and verbal communication skills
Ability to obtain a Public Trust clearance
Preferred
Active CISSP, CAP, CISM, or Security+
Company
cFocus Software Incorporated
cFocus Software automates FedRAMP compliance and develops government chatbots for the Azure Government Cloud, Office 365, and SharePoint.