Overview
LMI is seeking an Information System Security Officer (ISSO) to support our Department of Homeland Security (DHS) market.
LMI is a new breed of digital solutions provider dedicated to accelerating government impact with innovation and speed. Investing in technology and prototypes ahead of need, LMI brings commercial-grade platforms and mission-ready AI to federal agencies at commercial speed.
Leveraging our mission-ready technology and solutions, proven expertise in federal deployment, and strategic relationships, we enhance outcomes for the government, efficiently and effectively. With a focus on agility and collaboration, LMI serves the defense, space, healthcare, and energy sectors—helping agencies navigate complexity and outpace change. Headquartered in Tysons, Virginia, LMI is committed to delivering impactful results that strengthen missions and drive lasting value.
Responsibilities
- Acquire and manage all necessary documentation/artifacts, including cybersecurity support and resources, to support IT cybersecurity goals and objectives from a risk management perspective.
- Advise senior management on system risk levels and cybersecurity posture for cloud-based environments
- Assist in the deployment, architecture and configuration of security controls of deployed systems with Cloud Architects
- Ensure that developed systems and architectures are consistent with all applicable DHS cybersecurity policies and guidelines.
- Perform Assessment and Authorization (A&A) cybersecurity reviews, identify gaps, and support risk management plans for cybersecurity personnel to execute.
- Provide input on cybersecurity requirements and collect and maintain data needed to meet system cybersecurity compliance reporting.
- Provide subject matter expertise for Risk Management Framework (RMF) activities and related documentation to support system accreditation / Authority to Operate (ATO) requirements.
- Interpret noncompliance to determine the impact on levels of risk and/or overall effectiveness of the enterprise's cybersecurity program.
- Track audit findings and recommendations to ensure that appropriate mitigation actions are taken.
- Support necessary compliance activities (e.g., ensure that system security configuration guidelines are followed, compliance monitoring occurs).
- Coordinate with geographically-distributed, multi-discipline teams to ensure compliance with all applicable requirements for cybersecurity are addressed.
- Ensure that plans of action and milestones (POAM) or remediation plans are in place for vulnerabilities identified during risk assessments, audits, inspections, etc. and support necessary remediation/compliance activities.
- Participate in recurring cybersecurity working group meetings.
- Oversee and manage A&A activities to support their respective systems and security act