Senior Information System Security Officer supporting FBI's IT system categorization and security governance program. This role applies federal cybersecurity frameworks to organize complex IT portfolios and drive compliance, risk management, and cost recovery reporting.
What you'll do
- Develop and maintain documented methodology for categorizing FBI IT systems based on classification level, FIPS-199 impact, CNSS 1253 overlays, hosting environment (on-premises, Azure, AWS), data types, and mission function
- Apply categorization methodology across assigned systems in alignment with NIST RMF, FIPS-199, CNSS policies, and FBI cybersecurity directives
- Analyze systems based on risk, operational impact, security posture, and required level of ISSO/ISSE support
- Coordinate with program leadership, COR, and stakeholders to ensure methodology is transparent, consistent, and defensible
- Support labor allocation and seniority alignment to systems based on complexity and support requirements
- Generate monthly reporting on labor allocation, chargeback, and cost recovery by system and FBI division
- Support ATO lifecycle activities, POA&M tracking, risk assessments, and compliance documentation
- Track and implement updates to methodology in response to policy, technology, and organizational changes
Mission
Supporting the FBI under Objective 2: ISSO/ISSE Program Management to develop and implement a comprehensive methodology for categorizing and organizing FBI information technology systems. The program ensures consistent security grouping of systems across multiple classifications, hosting environments, and business functions to strengthen mission support and compliance posture.
Required skills
- FIPS-199 system categorization
- NIST RMF (SP 800-37, 800-53)
- CNSS 1253 overlays
- Federal cybersecurity compliance frameworks
- GRC tools and security data management
- System security control compliance and risk management
- ATO lifecycle and POA&M tracking
- Documentation and audit readiness support
- Stakeholder coordination and communication
- Labor mapping and cost recovery reporting