Information System Security Officer (Cybersecurity Assessment & Authorization)

Opened to U.S. Citizen and/or Green card holders only.

NikSoft Systems Corporation is a recognized Information Technology solutions provider. Founded in 1998 and based in Reston, Virginia, NikSoft is a CMMI Level 3 Certified company with an established reputation for excellence and on-time delivery with a consistently high customer satisfaction rating from its Federal Government and private consulting contracts.

Position Overview

We are seeking an Information System Security Officer (Cybersecurity Assessment & Authorization). You will support security assessments for diverse application domains, including cloud computing environments. This critical role serves as the primary Subject Matter Expert (SME) for the A&A process, managing large-scale, high-risk security compliance and architecture initiatives.

Key Responsibilities

• Lead Risk Assessments: Conduct security assessments and document compliance using NIST RMF and ISO frameworks.
• Manage A&A Processes: Oversee validation, accreditation, and documentation utilizing Governance, Risk, and Compliance (GRC) tools.
• Design Secure Architecture: Support blueprints, standards, and guidelines for secure enterprise IT infrastructures.
• Conduct Vulnerability Scanning: Interrogate systems for configuration status using network and vulnerability scanning tools.
• Act as A&A SME: Guide stakeholders, cross-functional business units, and new A&A resources through the USPS validation process.
• Brief Leadership: Build action plans, manage schedules, and brief executives on cross-functional IT risk and assurance.

Required Qualifications

• Framework Expertise: Proven proficiency with NIST Risk Management Framework (RMF) and ISO standards.
• Technical Skills: Strong background in GRC systems, security architecture principles, and network scanning technologies.
• Project Management: Track record of driving large, complex, and high-risk IT initiatives.
• Soft Skills: Excellent organizational skills alongside senior-level executive briefing capabilities.

Experience, Education & Certifications

• Experience: Minimum 5+ years of direct experience in Cybersecurity Assessment & Authorization (A&A), Information Assurance, or Risk Management Framework (RMF) environments.
• Education: Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field (relevant senior-level experience may substitute for a degree).
• Certifications: a current high-level security certification such as ICS2 CISSP (IAM Level III standard), ISACA CISM, or CGRC (Certified in Governance Risk and Compliance) preferred.

Opened to U.S. Citizen and/or Green card holders only.

****Candidates must be able to obtain a Postal Sensitive Clearance (US Citizenship or Green Card required). Additionally, candidates must not have traveled outside of the USA for a combined period not to exceed 6 months within the last 3 years.***