Information System Security Officer (ISSO)

Accountabilities:

• • Serve as the primary information security point of contact for assigned systems and Program Management Organizations, supporting cybersecurity engineering and compliance activities.
  • Execute end-to-end RMF activities supporting ATO decisions, including system categorization, security control selection and implementation, self-assessments, POA&M development, and continuous monitoring.
  • Develop and maintain System Security Plans (SSPs), including control baselines, control inheritance, Business Impact Analyses, implementation statements, technical and system descriptions, and hardware and software inventories.
  • Develop and maintain Configuration Management Plans and conduct Security Impact Analyses for system and configuration changes.
  • Review and approve Change Requests while documenting the cybersecurity impact of proposed configuration changes.
  • Develop, maintain, and test Contingency Plans and Incident Response Plans to support system resilience and business continuity.
  • Conduct or support annual risk assessments, security assessments, vulnerability assessments, audits, and other cybersecurity reviews.
  • Advise system owners, stakeholders, and senior executives on cybersecurity risks, compliance requirements, remediation strategies, and security best practices.
  • Develop remediation work plans to address assessment, audit, and compliance findings and track progress through resolution.
  • Maintain accurate hardware and software inventory records and perform FISMA scorecard analysis.
  • Ensure appropriate access controls are implemented and maintained for system users and resources.
  • Research and evaluate emerging security technologies, processes, practices, tools, and countermeasures designed to protect networks, devices, applications, and data.
  • Maintain current knowledge of cybersecurity threats and vulnerabilities, including encryption, network and device security, vulnerability exploitation, and data protection techniques.
  • Support compliance with FISMA, NIST standards, DHS 4300 Series requirements, and applicable DHS and component-level directives.

  Requirements:

  • U.S. citizenship is required.
  • Bachelor’s degree plus at least 7 years of applicable information security experience.
  • Minimum 7 years of professional experience in information security, cybersecurity, or a closely related field.
  • Demonstrated expertise with the Risk Management Framework (RMF), information security processes, audits, security tools, implementation activities, FISMA, NIST, and IT security.
  • Proven experience developing and maintaining System Security Plans (SSPs), Plans of Action and Milestones (POA&Ms), and Configuration Management Plans.
  • Strong knowledge of NIST SP 800-37, NIST SP 800-53, and DHS 4300 Series requirements.
  • DHS EOD suitability is preferred, as is current DHS EOD status.
  • Strong analytical, organizational, documentation, and communication skills, with the ability to advise both technical stakeholders and senior leaders.
  • Ability to manage multiple security, compliance, and risk activities while maintaining accurate and timely documentation.
  • CISSP, CISM, or CompTIA Security+ / CASP+ equivalent qualification is desirable, particularly an Information Assurance Technician Level III certification.
  • Previous DHS experience is a plus.
  • Experience with GRC platforms such as CSAM, RegScale, eMASS, or comparable tools is preferred.
  • Experience supporting emergency operations or disaster response missions is advantageous.
  • Knowledge of cloud security and FedRAMP authorization processes is a plus.
  • Experience with continuous monitoring and ongoing security assessment activities is desirable.

  Benefits:

  • Fully remote position available across the United States.
  • No required travel.
  • Competitive national salary range of $90,300–$189,600 USD, with final compensation based on factors including location, experience, skills, education, certifications, and applicable federal contract requirements.
  • Comprehensive healthcare and wellness benefits.
  • Retirement and financial benefits designed to support long-term financial well-being.
  • Flexible time-off benefits designed to support work-life balance.
  • Family support benefits and resources.
  • Continuing education, professional development, and learning opportunities.
  • Opportunities to contribute to high-impact federal missions focused on national security and public service.
  • A collaborative culture emphasizing integrity, innovation, trust, autonomy, and continuous professional growth.