Mid-level Information System Security Officer supporting FBI's ISSO/ISSE Program Management to develop and implement a standardized methodology for categorizing FBI IT systems based on security, compliance, and operational factors. This role combines federal cybersecurity expertise with hands-on risk management and GRC tool proficiency in a mission-critical national security environment.
What you'll do
- Develop and maintain a documented methodology to categorize FBI IT systems by classification level, FIPS-199 impact, CNSS 1253 overlays, hosting environment (on-premises/Azure/AWS), data types, and mission function
- Apply the categorization methodology across assigned systems in accordance with task order timelines, ensuring alignment with NIST RMF, FIPS-199, and FBI cybersecurity directives
- Analyze systems based on risk, operational impact, and security posture to determine appropriate ISSO/ISSE support levels and labor allocation
- Maintain clear documentation supporting system grouping decisions, labor mapping, and support allocation decisions through coordination with program leadership and COR
- Support labor category alignment and resource planning based on system complexity and compliance requirements
- Generate monthly reporting on labor allocation, chargeback, cost recovery, and prepare Monthly Statement Reports (MSRs) by system and FBI division
- Track and support updates to categorization methodology due to system changes, policy evolution, technology transitions, and organizational restructuring
- Assist with ATO lifecycle activities, POA&M tracking, risk assessments, compliance documentation, and audit readiness efforts
Mission
This position supports the FBI ISSO/ISSE Program Management office, focusing on organizing and categorizing FBI information technology systems to ensure consistent security governance, compliance alignment, and resource allocation across a complex national security infrastructure. The program serves critical law enforcement and national security missions requiring rigorous adherence to federal cybersecurity standards and National Security System policies.
Required skills
- FIPS-199 system categorization
- NIST RMF (Risk Management Framework)
- Federal cybersecurity compliance and governance
- GRC tools and security data management
- CNSS 1253 overlay application
- System security control compliance
- Documentation and audit readiness support
- Stakeholder coordination in complex environments