Senior Information System Security Officer supporting FBI's ISSO/ISSE Program Management to develop and implement a methodology for categorizing IT systems based on security, compliance, and operational factors. Ideal for experienced federal cybersecurity compliance professionals ready to drive systematic approaches to complex national security missions.
What you'll do
- Develop and maintain documented methodology to categorize FBI IT systems across multiple dimensions (classification level, FIPS-199 impact, hosting environment, CNSS overlays, mission function, data types)
- Apply categorization methodology to assigned systems in accordance with task order timelines and ensure alignment with NIST RMF, FIPS-199, and FBI cybersecurity directives
- Analyze systems for risk, operational impact, and security posture to determine appropriate ISSO/ISSE support levels and labor allocation
- Coordinate with program leadership, COR, and internal stakeholders to ensure methodology transparency, consistency, and defensibility
- Maintain supporting documentation for system grouping decisions, labor mapping, and cost recovery analysis
- Support monthly reporting on labor allocation, chargeback, and cost recovery by system and FBI division; prepare Monthly Statement Reports (MSRs)
- Track system, policy, technology, and organizational changes affecting categorization logic; support timely methodology updates
- Support ATO lifecycle activities, POA&M tracking, risk assessments, compliance documentation, and audit readiness efforts
Mission
This role supports the FBI under Objective 2: ISSO/ISSE Program Management, working to establish consistent system categorization aligned with federal frameworks (FIPS-199, NIST RMF, CNSS policies) across classified and unclassified environments. The work directly enables resource allocation, compliance reporting, and risk management for FBI's diverse IT portfolio supporting national security operations.
Required skills
- FIPS-199 system categorization
- NIST RMF (SP 800-37, SP 800-53)
- CNSS 1253 overlay application
- Federal cybersecurity compliance frameworks
- GRC tools and security data management
- Risk assessment and system security governance
- ATO lifecycle and POA&M tracking
- Technical documentation and audit readiness
- Stakeholder coordination in complex environments
- Labor/cost allocation and chargeback reporting