Information System Security Officer – ISSO

. Serve as the single point of contact for systems security matters .

Posted 9/25/2026full-timeRemote • United StatesSeniorLead💰 $90,300 - $189,600 per yearWebsite

Tools & technologies

CloudCyber Security

Key responsibilities & impact

Serve as the single point of contact for systems security matters
Lead cybersecurity engineering efforts for assigned Program Management Organizations
Support the Compliance Branch Lead
Spearhead systems’ Authority to Operate (ATO) efforts
Execute complete Risk Management Framework (RMF) activities for ATO decisions
Perform system categorization, security control selection and implementation, self-assessments, POA&M development, and continuous monitoring
Develop and maintain System Security Plans, including control baselines, inheritance, Business Impact Analyses, implementation statements, technical and system descriptions, and hardware/software inventories
Create and maintain Configuration Management Plans
Conduct Security Impact Analyses, approve Change Requests, and document configuration-change security impacts
Develop and test Contingency Plans and Incident Response Plans
Conduct annual risk assessments and support security and vulnerability assessments
Advise system owners and senior executives on cybersecurity matters
Develop remediation work plans for assessment and audit findings
Maintain hardware and software inventory lists
Conduct FISMA Scorecard Analysis
Ensure proper access controls for system access
Track and suggest technologies, processes, and practices to protect networks, devices, programs, and data
Research and maintain proficiency in cybersecurity tools, techniques, countermeasures, and vulnerability, data-hiding, network, device-security, and encryption trends

What you’ll need

U.S. Citizenship required
DHS EOD suitability or Current DHS EOD preferred
BS/BA + 8 years of applicable experience in information security
7+ years of experience in information security
Demonstrated expertise in RMF, Information Security processes, audits, tools, implementation, FISMA, NIST, and IT security
Experience developing System Security Plans, POA&Ms, and Configuration Management Plans
Knowledge of NIST SP 800-37, NIST SP 800-53, and DHS 4300 Series requirements
One of the following IAT Level III qualifications preferred: CISSP, CISM, or CompTIA CASP+
Previous DHS experience preferred
Experience with CSAM, RegScale, eMASS, or similar GRC tools preferred
Experience supporting emergency operations or disaster response missions preferred
Knowledge of cloud security and FedRAMP authorization processes preferred
Experience with continuous monitoring preferred

Comp & perks