Cross-Functional ISSO Subject Matter Expert

- Assist with all Risk Management Framework (RMF) activities as detailed in NIST SP 800-37, focusing on managing security and privacy risks. - Assist in all Security Control Assessment activities, engaging with system teams to compile necessary evidence. - Support Configuration, Patch, and Vulnerability Management tasks, reviewing scan results to identify and remediate misconfigurations and weaknesses. - Create briefings and presentations for Government Project Managers and Executive Management. - Assist in Security Authorization Processes, Security Control Assessments, and ongoing authorization efforts as directed by the Federal Government. - Produce documentation following our clients 2-day turnaround policy, including FIPS 199, E-Authentication Workbook, PTA, PIA, CP, CPT, and a 5-day policy for Security Plan reviews. - Provide Cloud Security assistance for enterprise infrastructure components transitioning and migrating to cloud services like PaaS and IaaS. - Ensure systems are patched and hardened in accordance with client mandates. - Conduct research and analysis of issues and formulate recommendations. - Prepare and conduct security training as necessary. - Interpret and analyze privacy laws and regulations linked to the Privacy Act of 1974 and related legislation. - Support security and privacy requirements for both internal and external system connections. - Facilitate proposed collection, sharing, and maintenance of PII through privacy compliance documentation. - Conduct thorough document reviews (DR) for all risk management and security operations documentation per FISMA standards. - Perform quality assurance checks to confirm that documentation fulfills client and FISMA standards. - Edit and update security authorization documents and presentations as needed. - Develop and adhere to project schedules and meet deadlines. - Acquire a profound understanding of the audience and documentation requirements through collaboration with peers and managers. - Research and gain insights into products, services, technology, or concepts. - Conduct Risk Analysis on vendors and cloud service providers to identify and mitigate risks in emerging IT projects. - Ensure compliance with daily, monthly, and quarterly requirements on time. - Execute other relevant duties as assigned.