Information System Security Officer (ISSO) (Cybersecurity)

TL;DR

Information System Security Officer (ISSO) (Cybersecurity): Lead C&A activities and RMF compliance for federal and DoD information systems with an accent on NIST standards, security controls, and authorization processes. Focus on developing authorization packages, conducting risk assessments, performing control assessments, and supporting ATO and continuous monitoring.

Location: Remote within the DC Metro Area; may require travel to Fort Meade, MD for SIPRNet access. Must be U.S. Citizen with active DoD SECRET security clearance.

Company

Small business specializing in IT, Cybersecurity, Information Assurance for federal, state, and local agencies; ISO 9001:2015, ISO 27001:2013, 20000:2018, and CMMI L3 certified.

What you will do

• Lead C&A activities as ISSO in accordance with RMF.
• Develop, maintain, and review authorization packages including SSP, SAR, POA&M.
• Conduct security control assessments and coordinate remediation.
• Ensure compliance with NIST 800-53, NIST 800-37, RMF Rev 5, and DoD policies.
• Support ATO, ATC, continuous monitoring, risk assessments, and mitigation strategies.
• Collaborate with system owners, ISSMs, stakeholders; support audits and reviews.

Requirements

• U.S. Citizen with active DoD SECRET clearance.
• Bachelor’s degree in Cybersecurity, Information Systems, Computer Science, or equivalent.
• 8+ years in Information Assurance, Cybersecurity, or C&A.
• Strong RMF and system authorization experience.
• Hands-on with NIST 800-53, RMF Rev 5, security documentation (SSP, POA&M, SAR).
• Active CISSP and/or CISM certification.
• Experience with federal/DoD environments, eMASS, DITPR, GRC tools.
• Cloud/SaaS security for ServiceNow, Azure, FedRAMP.
• Strong analytical, communication, documentation, risk management skills.

Culture & Benefits

• Extremely competitive salary.
• 95% employer-paid medical, dental, vision for employee.
• 100% employer-paid life, STD, LTD disability for employee.
• 401k with company match and profit sharing.
• Flexible Spending Account (FSA) for dependent and health care.
• 11 standard holidays and 3 weeks annual leave.