ISSO Audit Support

Overview

SkyePoint Decisions is a leading Cybersecurity Architecture and Engineering, Critical Infrastructure and Operations, and Applications Development and Maintenance IT service provider headquartered in Dulles, Virginia with operations across the U.S. We provide innovative enterprise-wide solutions as well as targeted services addressing the complex challenges faced by our federal government clients. Our focus is on enabling our clients to deliver their mission most efficiently and effectively – anytime, anywhere, securely. We combine technical expertise, mission awareness, and an empowered workforce to produce meaningful results.

Join the SkyePoint team and become part of a highly skilled, professional workforce dedicated to delivering mission-critical solutions. Our exceptional technical experts provide innovative services and solutions to federal agencies, making a meaningful impact every day. At SkyePoint, we value top talent and foster an environment where your ideas and contributions truly matter. Be part of a team that values excellence and rewards innovation—your future starts here!

This is a contingent position based upon customer approval. 

Responsibilities

SkyePoint Decisions is seeking a highly motivated team member to fill the role of ISSO Audit Support to join our team supporting the Department of Education’s (DoED) Federal Student Aid (FSA) team.

This position is remote.

Responsibilities:

• Create A&A documentation such as System Security Plans (SSP) and Continuous Monitoring plans.
• Provide ISSO updates, at the monthly ISSO meetings, associated with POAM closures, vulnerability tracking tool functionality, root cause analysis, compliance, or other security related issues.
• Maintain metrics associated with POA&M artifacts, approval rates, timeliness, etc.
• Collaborate with program analysts and the lead engineer to improve metrics. Present metric updates at monthly ISSO meetings.
• On a quarterly basis, provide an enterprise risk analysis report for the findings in the vulnerability-tracking tool and provide recommendations for reducing recurring findings, enterprise findings, training, and improved processes as applicable.
• Maintain Cybersecurity framework (CSF) Risk scorecards for all FISMA reportable systems.
• Participate in the selection of the organization’s common security controls and in determining their suitability for use in the information system.
• Support the information system owner in selecting security controls for the information system.
• Review the security controls regarding their adequacy in protecting the information and information system.
• Support the ongoing security authorization (OSA) process that includes continuous monitoring.
• Provide document development support for CISO sponsored events and responses to questions and concerns.
• Draft document review and feedback on application of security and privacy requirements (e.g., technical review boards, review of SSPs, RA’s, contingency plan, POA&M reports).
• Identify potential exploitation vulnerabilities and propose mitigation approaches for ongoing IT operations.
• Provide insight into latest IT threats and industry IT security trends.
• Provide system documentation to the system security managers to support A&A efforts.
• Maintain and annually (or as needed) update a Vulnerability Management Standard Operating Procedure document.
• Create, analyze, maintain, provide recommendations, and request for closure POA&Ms.
• Create a Weekly Plans of Actions and Milestones Report that includes enterprise status, trends, and statistics, 30, 60, 90-day projections, audit security findings, recommended accepted risk status, ECD Change requests, proposed finding re- assignments, and overdue findings.
• Conduct audits of closed Plan of Actions and Milestones (POA&M) for completeness and compliance.

Qualifications

Required Qualifications:

• Must be able to obtain a DoED Level 6 High Risk/Public Trust Security Clearance.
• Bachelor’s Degree or equivalent and at least five to ten (5-10) years’ experience working in the cybersecurity field.
• Must have CISSP or equivalent.
• Working knowledge of Microsoft Office (Word, PowerPoint, and Excel).
• Good familiarity with and understanding of all relevant government and agency policies and procedures to ensure system documentation is compliance with relevant guidelines, e.g., FedRAMP, RMF, FISMA, FIPS-II, NIST, etc.
• At least five (5) years of experience with professional technical writing, with three (3) years supporting RMF documentation, and at least three (3) years of concurrent experience with the use of eGRC tools.
• Certified in Risk and Information Systems Control (CRISC), Certified Authorization Professional (CAP), or equivalent certification required.
• Must be a U.S. citizen.

What We Can Offer You:

• At SkyePoint, we go B.I.G. (beginning in GRATITUDE) by recognizing all we have and giving back to our employees, families, and communities. It instills a positive mindset that permeates all we do. By beginning in gratitude, SkyePoint can continue to spread living in gratitude each day.
• Great Benefits: Several insurance options including HMO and High Deductible plans with Health Savings Accounts [HSAs], Flex Spending Accounts [FSAs], Full Dental Plans, ST/LT Disability, Life Insurance, floating federal holiday options, and 401k matched
• Certificate Incentive Program: To promote professional development, we recognize and reward employees who obtain new certifications aligned with business needs.
• SkyePoint DoD SkillBridge Industry Partner Fellowship Program

• Flexible Work Environment

Compensation:

Salary Range: $105,000-$110,000

The SkyePoint Decisions salary range for this position is a general guideline only. It represents an estimated range for this position and is just one piece of our total compensation package. 

Salary at SkyePoint is determined by various factors, including but not limited to location, work schedule, the candidate’s combination of education, knowledge, skills, competencies, and experience, as well as contract-specific affordability, market data and business considerations.

In addition to a competitive salary, SkyePoint offers benefits including a certification incentive program, PTO, floating federal holiday options, several insurance options including HMO and High Deductible plans with Health Savings Accounts [HSAs], Flex Spending Accounts [FSAs], Full Dental Plans, Vision, ST/LT Disability, Life Insurance, and 401k matched.

SkyePoint Decisions is an established ISO 9001:2015 and ISO/IEC 27001:2013 certified small business and appraised at CMMI Level 3 for Services and Development. We possess a common vision of excellence and foster a collaborative team culture built upon individual performance and accountability. We invest in our people and systems to create value for our clients. It is the SkyePoint Way. We are grateful for the opportunity to work with exceptional people and give back to the communities we serve. Our employees value the flexibility at SkyePoint that allows them to balance quality work and their personal lives.

Please be aware of recruiting scams and people claiming to be from SkyePoint Decisions. For more information, please see the Welcome Page of our Careers site.

Skyepoint Decisions is a participating E-Verify Employer. 

U.S. Citizenship is required for most positions.

Equal Opportunity Employer/Veterans/Disabled.