Information Systems Security Officer

This is a fully remote position, open to applicants in District of Columbia, +1 more state.

📋 Description

• Provide support and execute all stages of the NIST SP 800-37 RMF lifecycle across various concurrent systems and network environments.

• Create, maintain, and update RMF documentation, which includes SSPs, SARs, SAPs, POA&Ms, contingency plans, incident response plans, risk assessment documents, and interconnection agreements.

• Conduct simultaneous RMF assessments and keep compliance documentation updated in JCAM.

• Evaluate and authorize emerging technology systems, including AI/ML platforms and architectures based on microservices.

• Oversee evidence collection, control traceability documentation, and BOE packages.

• Determine FIPS 199 system impact levels and perform PIAs and PTAs.

• Analyze vulnerability findings using Tenable Security Center and manage POA&M remediation until closure.

• Generate security reports, dashboards, status updates, metrics, and scorecard reporting.

• Ensure adherence to FISMA, NIST SP 800-53 Rev 5, CNSSI 1253, OMB A-130, and client cybersecurity policies.

• Oversee assessment workflow and task tracking in JIRA.

• Mentor junior ISSO personnel and create SOPs, work instructions, and process documentation.

• Collaborate with both technical and non-technical staff, system owners, and program leadership.

⛳️ Requirements

• Bachelor's degree with over 12 years of experience in information system security, or equivalent experience.

• 8–10+ years in an ISSO or a cybersecurity compliance position.

• Direct accountability as the ISSO of record for assigned systems.

• Experience in conducting RMF assessments across multiple network environments.

• Proven experience managing multiple concurrent A&A assessments.

• Skilled in developing and maintaining RMF artifact packages, including SSPs, SARs, POA&Ms, RAR, and BOE documentation.

• Familiarity with microservices-based or distributed system architectures and conducting component-level security assessments.

• Proficient with GRC platforms such as JCAM/CSAM, Xacta, or similar tools.

• Active CompTIA Security+ CE certification required.

• Compliance with DoD 8570.01-M / DoD 8140 at IAM Level II or III, with CISSP, CISM, CASP+, or equivalent certifications.

• Capability to maintain a Public Trust clearance.

🏝️ Benefits

• Eligibility for 100% remote work.

• Salary range of USD $143,230.00–$175,000.00 per year.