Information Systems Security Officer

We need to output HTML fragment with sections: About the role? The description includes "The Opportunity" and description text. We need to use

for section headings like About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. We must only include sections when posting has real specific content. We have content for responsibilities (Key Responsibilities). Requirements (Fluency, clearance). Education (Bachelors). Required Skills, Experience and Abilities (list). Preferred Qualifications (list). Physical Demands and Work Environment (maybe not required heading; but we could include under Requirements? Not a standard heading; but we could maybe include under "Requirements" or "Qualifications"? The instruction: Use headings for those specific labels; we can also include other headings if they match? It says use

for section headings (e.g. About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule). So we should only use those headings. We need to map content accordingly. We have: - About the role: could be the "The Opportunity" paragraph describing role. We'll put that under

About the role

with

. - Responsibilities: the "Key Responsibilities (Principal Duties and Accountabilities *Essential Functions)" list. We'll output

Responsibilities

then

• each bullet. - Requirements: includes Fluency in English, Must have active Secret or higher Security clearance. Also Education (Bachelors degree...). Could combine under Requirements heading. But we also have Education separate maybe could be under Qualifications? The instruction: Use headings for those categories; we can decide to put Education under Requirements or Qualifications. Since Education is a qualification, maybe put under Qualifications. However we have also "Required Skills, Experience and Abilities" which is Skills. And "Preferred Qualifications" which is Qualifications (preferred). We'll need to avoid duplication. We need to preserve all substantive information. So we need to include Education somewhere. Could put under

  Qualifications

  and include Education bullet plus maybe required skills? But Required Skills is separate heading Skills. Preferred Qualifications also under Qualifications? Might be confusing. Better to follow typical structure: About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. We can assign: - About the role: The Opportunity paragraph. - Responsibilities: Key Responsibilities list. - Requirements: Fluency in English, Must have active Secret or higher Security clearance. - Qualifications: Education (Bachelors degree...), Preferred Qualifications list (maybe we treat as Qualifications). Also maybe include Required Skills? But Skills heading separate. - Skills: Required Skills, Experience and Abilities list. - Benefits: Benefits paragraph. - Pay: Compensation paragraph (salary range). - Schedule: Not provided; we should not create Schedule section if no specific content. So omit. Physical Demands and Work Environment: Not a standard heading; we could maybe fold into Requirements or Qualifications? But instruction says only use those headings; we could include under Requirements as additional bullet? Might be okay but not exactly matching. However we must preserve all substantive information; we could include it under Requirements as a bullet list item? Might be acceptable. But better to create a separate section? Not allowed headings besides those. Could we include under "Qualifications"? Not ideal. Perhaps we can include under "Requirements" as a bullet: "Physical demands: capable of lifting up to 50 lbs, occasional evenings/weekends, travel up to 10%, office environment." That preserves info. We must not include boilerplate like Equal Opportunity, EEO, application instructions, etc. Remove those. Now produce HTML fragment. We need to ensure we don't repeat job title as heading. Let's extract content. About the role: The Opportunity paragraph: "The ISSO, working closely with the customers ISSO, directly supports efforts to plan, coordinate and implement the information security program and system accreditation lifecycle. Responsible for enterprise and system-level cybersecurity engineering tasks. Identifies security risks and integrates required security controls as set forth by policy. Ensures security compliance of information technology applications. Responsible for monitoring security policies and procedures, coordinating internal security audits and security exercises, delivering required security training and participating in coordination meetings." We'll put that as

  . Responsibilities: list items from "Key Responsibilities (Principal Duties and Accountabilities *Essential Functions)" after that colon? Actually the text includes a long sentence then bullet-like items separated by semicolons. We need to split into list items. Let's parse: - Primary liaison to customer ISSO to support the system accreditation process and Authorization to Operate (ATO) efforts, audits, and reaccreditation cycles; - Utilizes customers security governance tool for the system authorization and ATO lifecycle - Working closely with engineers, utilizes vulnerability scanning tools and reports to track and remediate findings - Evaluates and validates physical security to ensure support of systems security requirements - Tracks and manages Plans of Action and Milestones (POAandMs) that are out of compliance - Supports NIST RMF implementation and documentation including annual security control review - Coordinates and assists with internal security audits - Develops and maintains security documentation such as the System Security Plan, system boundary diagram, inventory of hardware and software, ports and protocols, etc. - Develops, coordinates and tests incident response plans, contingency plans and security tabletops/exercises - Documents system parameters and ensure all security documents are kept current - Asses proposed changes to information systems; identifies risks and impacts; Performs Security Impact Analysis (SIA) and submits change control requests for system enhancements to the ATO package - Participates in new technology enhancements and implementations and its implication on the system boundary - Assists in testing system function pre and post security control implementations - Delivers annual compliance training as mandated by policy and regulatory standard - Oversees user account provisioning, permission review, and access enforcement for system integrity - Develops and maintains Memorandum of Understanding (MOUs) and Interconnection Service Agreements (ISAs) with internal organizations and external entities to support secure information system interconnections and data sharing - Participating in special projects as required We'll make each as

• . Requirements: Fluency in English (written and spoken); Must have active Secret or higher Security clearance. We'll make
  • each. Qualifications: Education: Bachelors degree in computer science, information technology or information security, or the equivalent combination of education and work experience. Preferred Qualifications list: many items. We'll put under Qualifications as well? But we have also Skills heading. Perhaps we put Education under Qualifications, and Preferred Qualifications also under Qualifications (maybe as a sublist). But we need to avoid thin sections. Could combine Education and Preferred Qualifications under Qualifications heading. Thus

    Qualifications

    then
    • Education: ...
    then each preferred qualification as separate
    • . But we need to ensure we don't duplicate content that also appears under Skills. The Required Skills, Experience and Abilities list is separate; we will put under Skills. Skills heading: Required Skills, Experience and Abilities list. Let's extract that list: - 5+ years of experience as an ISSO utilizing the RMF and NIST 800-53 guidelines - 5+ years of experience in security engineering and information technology - 3+ years of project management experience - Proficiency in writing technical analysis reports That's it. Preferred Qualifications list (many): - Design and implementation of security solutions; - Familiarity with security technology tools and applications for secure VPNs, Single Sign-on, Multi-Factor Authentications, etc. - Proficient in all facets and implementation of the Risk Management Framework (RMF), NIST 800-53 and DISA STIGs - Hands-on experience as an AISSO/ISSO driving successful system authorization and ATOs, and maintenance of system ATOs - Hands-on experience utilizing an automated security governance tool (i.e., Xacta, Archangel, etc.) - Certifications- CISSP, Security+, CASP+, CAP - Information Assurance - Cloud-based security principles - Project management - Agile methodology - Nessus and other system vulnerability identification tools - Strong problem solving, analytic, and oral/written communication skills - Ability to work well independently under pressure and time constraints, in a small team environment We need to clean up punctuation. Benefits: "NexTech Solutions offers a comprehensive benefits package designed to support employees and their families, including competitive health, dental, and vision coverage, retirement savings options, paid time off, and additional employee benefits." Pay: "The base salary range for this position is $120,000 - $185,000. Actual compensation will be determined based on factors including relevant experience, qualifications, skills, location, and internal equity." Schedule: none. Physical Demands and Work Environment: we will incorporate under Requirements maybe as additional bullet(s). But we already have Requirements heading for fluency and clearance. Could add more bullets under Requirements: "Capable of lifting and moving information technology equipment up to 50 pounds", "Ability to work occasional evenings and/or weekends as job duties demand", "Ability to travel domestically and internationally up to 10% of the time, which may include extended periods of standing, walking, or navigating airports and government facilities.", "Professional office environment with standard office equipment (computers, phones, printers)." That preserves info. Now ensure we don't include boilerplate like "Equal Opportunity", "Send this role to someone you know", etc. Now produce HTML. We'll output:

      About the role

      ...

      Responsibilities

      • ...
      ...

      Requirements

      • Fluency in English (written and spoken)
      • Must have active Secret or higher Security clearance
      • Capable of lifting and moving information technology equipment up to 50 pounds
      • Ability to work occasional evenings and/or weekends as job duties demand
      • Ability to travel domestically and internationally up to 10% of the time, which may include extended periods of standing, walking, or navigating airports and government facilities.
      • Professional office environment with standard office equipment (computers, phones, printers)

      Qualifications

      • Bachelors degree in computer science, information technology or information security, or the equivalent combination of education and work experience
      • Design and implementation of security solutions
      • Familiarity with security technology tools and applications for secure VPNs, Single Sign-on, Multi-Factor Authentications, etc.
      • Proficient in all facets and implementation of the Risk Management Framework (RMF), NIST 800-53 and DISA STIGs
      • Hands-on experience as an AISSO/ISSO driving successful system authorization and ATOs, and maintenance of system ATOs
      • Hands-on experience utilizing an automated security governance tool (i.e., Xacta, Archangel, etc.)
      • Certifications: CISSP, Security+, CASP+, CAP
      • Information Assurance
      • Cloud-based security principles
      • Project management
      • Agile methodology
      • Nessus and other system vulnerability identification tools
      • Strong problem solving, analytic, and oral/written communication skills
      • Ability to work well independently under pressure and time constraints, in a small team environment

      Skills

      • 5+ years of experience as an ISSO utilizing the RMF and NIST 800-53 guidelines
      • 5+ years of