Job Description
The City of Long Beach is a dynamic, forward-thinking organization dedicated to serving our community with integrity and excellence. We are currently seeking a highly skilled Senior Information Systems Security Officer (ISSO) to join our team. In this pivotal role, you will be responsible for safeguarding our federal and state information systems against cyber threats while ensuring full compliance with NIST, FISMA, and FedRAMP regulations.
If you are a security leader passionate about public service and possess deep expertise in government infrastructure protection, we want to hear from you.
Responsibilities
- Oversee the security posture of federal and state information systems, ensuring compliance with FISMA and NIST 800-53 requirements.
- Conduct regular risk assessments, vulnerability scans, and security audits to identify and mitigate potential threats.
- Manage the System Security Plan (SSP) and Authorization to Operate (ATO) lifecycle for assigned systems.
- Lead incident response teams in the event of a security breach or cyber-attack, coordinating with federal agencies as necessary.
- Monitor security alerts and implement appropriate countermeasures to protect sensitive government data.
- Provide expert security consulting to project managers and technical staff to integrate security best practices into development lifecycles.
- Prepare and present security briefings to senior leadership and regulatory auditors.
Qualifications
- Bachelor’s degree in Computer Science, Information Security, or a related field (Master’s degree preferred).
- Certified Information Systems Security Professional (CISSP) or equivalent certification required.
- Minimum of 5 years of experience in information security, specifically within a federal, state, or local government environment.
- Deep knowledge of NIST frameworks, FISMA compliance, and FedRAMP authorization processes.
- Strong understanding of network security architecture, cryptography, and identity management.
- Excellent communication skills with the ability to translate complex technical concepts for non-technical stakeholders.
- Ability to obtain and maintain a Public Trust or Secret clearance.