Information Systems Security Officer – Mid/Senior Level

This is a fully remote position, open to applicants in United States.

📋 Description

• Assist a federal program in the capacity of an Information Systems Security Officer.

• Ensure the ongoing security, compliance, and risk management of information systems.

• Create and execute system security documentation and procedures necessary for obtaining and maintaining an Authority to Operate (ATO).

• Act as a trusted security advisor, ensuring adherence to NIST, FISMA, FedRAMP, and RMF standards.

• Implement continuous monitoring practices for the designated systems.

• Lead the preparation of ATO packages, which include SSPs, POA&Ms, SARs, and additional supporting documentation.

• Guide systems through the ATO lifecycle and continuous authorization processes.

• Conduct Security Impact Analyses for system modifications and devise strategies for mitigating vulnerabilities.

• Collaborate with system engineers to uphold secure system baselines.

• Execute self-assessments, risk assessments, and annual evaluations of Contingency Plans and Incident Response Plans.

• Review audit logs, analyze vulnerability scans, and assess system-level reports.

• Utilize expertise in network security, cloud environments, containers, architectures, operating systems, and security assessment tools.

• Manage multiple systems concurrently.

⛳️ Requirements

• Bachelor's degree in IT, Cybersecurity, or a related field.

• At least 6 years of experience in ISSO or RMF roles.

• Direct experience in developing ATO packages (SSP, POA&M, SAR).

• Strong understanding of NIST SP 800-53, FISMA, and RMF requirements.

• Proven ability to manage 4–6 systems simultaneously.

• Experience with cloud-based systems (SaaS, IaaS, PaaS) from AWS, Azure, or GCP is preferred.

• Familiarity with Google Suite tools is preferred.

• Knowledge of AI tools such as Gemini and ChatGPT is preferred.

• Experience with Archer or CSAM platforms is preferred.

• One relevant certification is required: CISSP, CISM, CISA, CRISC, or CGRC.

• Experience supporting federal civilian agencies is preferred.

• Active Public Trust clearance is preferred.

• Must successfully pass a federal background investigation, including financial suitability screening.

• Must be authorized to work in the United States without sponsorship.

🏝️ Benefits

• Veterans and military-affiliated individuals are strongly encouraged to apply.

• Veteran Hiring Preference.

• Service-Disabled Veteran-Owned Small Business (SDVOSB) veteran hiring context.