Senior Information System Security Officer supporting FBI to develop and execute a comprehensive IT system categorization methodology based on security, operational, and mission factors. Ideal for experienced federal cybersecurity professionals ready to drive compliance and risk management at scale.
What you'll do
- Develop and maintain documented methodology for categorizing FBI IT systems across multiple dimensions including classification level, FIPS-199 impact, hosting environment, CNSS overlays, data types, and business function
- Apply categorization methodology to assigned systems per task order timelines and ensure alignment with FIPS-199, NIST RMF, CNSS policies, and FBI cybersecurity directives
- Analyze systems based on risk posture, operational impact, and required ISSO/ISSE support levels; maintain clear documentation supporting all grouping decisions
- Coordinate with program leadership, Contracting Officer's Representative (COR), program manager, and internal reviewers to ensure methodology consistency, transparency, and defensibility
- Support labor category alignment and seniority level mapping to systems based on complexity and support requirements
- Generate monthly reporting on labor allocation, chargeback, and cost recovery by system and FBI division; prepare Monthly Statement Reports with detailed cost breakdowns
- Support ATO lifecycle activities, POA&M tracking, risk assessments, compliance documentation, and audit readiness efforts
- Track and implement changes to systems, policies, technologies, and organizational structures that affect categorization logic and reporting workflows
Mission
Agile Defense is supporting the FBI's Objective 2: ISSO/ISSE Program Management initiative. This role directly supports the FBI's effort to consistently categorize and organize information technology systems across the bureau based on classification levels, FIPS-199 impact ratings, hosting environments, and mission-critical factors to enable better governance and resource allocation.
Required skills
- FIPS-199 categorization and implementation
- NIST RMF (SP 800-37, SP 800-53) frameworks
- CNSS 1253 overlays and policy alignment
- GRC tools and security data management
- System security control compliance and risk management
- Federal cybersecurity compliance documentation
- Audit readiness and POA&M tracking
- Cost recovery and labor allocation reporting
- Stakeholder coordination and communication
- ATO lifecycle and authorization activities