layiq

/la·yiq/adjective

worthy; deserving; fitting; suitable.

A role, opportunity, or path that merits attention, time, and pursuit.

LAYIQ - Information Systems Security Officer at Raft

At least four years of experience in ISSO, ISSM, cybersecurity compliance, information assurance, or a closely related role.
Strong understanding of the Risk Management Framework and applicable NIST guidance, including NIST SP 800-37, NIST SP 800-53 Revision 5, and NIST SP 800-60.
Demonstrated experience applying RMF and NIST security controls in cloud-native environments, including Kubernetes and containerized workloads.
Experience developing and maintaining RMF artifacts such as SSPs, control implementation statements, traceability matrices, PPSM packages, POA&Ms, risk assessments, assessment plans and reports, vulnerability results, and supporting evidence.
Experience with continuous monitoring, vulnerability management, DISA STIG compliance, security assessments, and remediation tracking in federal or DoD environments.
Ability to organize and prioritize security activities, evidence, risks, and authorization milestones across multiple systems and customer environments.
Ability to understand technical architectures and findings, connect them to security controls and mission risk, and communicate clearly with engineers, program leaders, and security stakeholders.
Security+ or another qualifying DoD 8140 or contract-required certification at hire, or the ability to obtain it within six months of employment with Raft.
Highly preferred: Bachelor's degree in cybersecurity, information assurance, information technology, or a related field.
CISSP, CISM, CISA, CGRC, or another relevant advanced cybersecurity certification.
Experience with eMASS or a similar governance, risk, and compliance tool.
Experience supporting or completing an IATT or ATO process.
Experience securing Kubernetes-based DevSecOps platforms or software factories, particularly within Platform One or a comparable DoD environment.
Experience implementing or assessing FIPS requirements.
Experience writing and reviewing RMF control implementation statements, security policies, and procedures.
Experience communicating security risk and authorization status to program or executive leadership.
Clearance Requirements: Active Secret security clearance with the ability to obtain and maintain a Top Secret security clearance.

Information Systems Security Officer

Employer job description

Who we are:

About the role:

What you will do

What we are looking for:

Work Type:

What we will offer you:

Our Vision Statement:

Our Customer Obsession:

About this listing