Information System Security Officer – Federal Programs

Commence

. Serve as designated ISSO for assigned federal systems and primary system-level security liaison .

Posted 10/23/2026full-timeRemote • United StatesMid-LevelSenior💰 $100,000 - $140,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in Information Assurance and Cybersecurity, with a strong focus on NIST Risk Management Framework, security assessments, and compliance with federal security standards. Proficient in authoring security documentation and managing security incidents while coordinating with various stakeholders.

Highest-signal resume keywords

ISSO ExperienceNIST Risk Management FrameworkSSP AuthorshipCompTIA Security+ CertificationFederal Information Systems Compliance

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Information AssuranceCybersecurityRisk AssessmentSecurity Assessment and AuthorizationVulnerability ManagementConfiguration ManagementIncident Response PlanningContinuous MonitoringPublic Trust ManagementFederal System Authorization

Soft Skills

Clear Writing AbilityTime ManagementMultitasking

Tools & Technologies

GRC PlatformsTenable/NessusAWS InspectorMicrosoft 365/AzureSCAP/STIG Viewer

Certifications & Qualifications

CompTIA Security+CISSPCGRCCISACCSP

Industry Keywords

NIST SP 800-37NIST SP 800-53FedRAMPHIPAASOC 2CUI RequirementsCMS ARS/IS2P2VA 6500DoD RMFIRS Publication 1075

Tech Stack

Tools & technologies

AWSAzureCyber Security

About the role

Key responsibilities & impact

Serve as designated ISSO for assigned federal systems and primary system-level security liaison
Carry out CIO and ISSM priorities and escalate program-level issues, risk acceptances, and exceptions
Coordinate with Project Managers to incorporate security and authorization milestones into project plans
Assess security impacts of system changes before release
Run the NIST Risk Management Framework Security Assessment and Authorization lifecycle from FIPS 199 categorization through authorization, ongoing authorization, and reauthorization
Author and maintain SSPs, risk assessments, Privacy Impact Assessments, contingency plans, incident response plans, configuration management plans, and interconnection agreements
Maintain POA&Ms in agency GRC platforms
Review vulnerability and configuration scans against DISA STIGs, CIS benchmarks, and agency baselines
Assign and track remediation with Cybersecurity Engineers and IT Operations
Prepare ongoing-authorization and continuous-monitoring reports
Lead preparation for CMS, VA, DoD, and IRS agency assessments
Coordinate evidence collection and findings responses with Compliance Analysts
Maintain compliance with agency-specific federal security, privacy, and CUI requirements
Respond to security and privacy incidents affecting federal data and coordinate agency notifications
Complete system-level contract security deliverables
Manage federal personnel security tasks, including Public Trust, e-QIP processing, training, rules of behavior, and access attestations
Support internal audits and control assessments against SOC 2, NIST, HIPAA, HITRUST, and ISO/IEC 27001 frameworks
Provide system-specific input for external audits and security questionnaires

Requirements

What you’ll need

5+ years of information assurance or cybersecurity experience
3+ years as an ISSO or A&A lead for federal information systems
Bachelor’s degree in a related field or equivalent experience
Personally taken at least one federal system through an initial ATO or reauthorization under NIST SP 800-37/800-53
SSP authorship and POA&M management in agency-specific GRC platforms
Working knowledge of at least two: CMS ARS/IS2P2, VA 6500, DoD RMF and NIST SP 800-171/CMMC, IRS Publication 1075 & 4812, DHS 4300A
Experience with FedRAMP and HIPAA is a plus
Comfortable reading vulnerability and configuration scan output from Tenable/Nessus, Defender, AWS Inspector, or SCAP/STIG Viewer
Familiarity with AWS and Microsoft 365/Azure
Clear, precise writing ability and capacity to manage multiple systems and deadlines
CompTIA Security+ or higher DoD 8140-qualifying certification required
CISSP, CGRC, CISA, or CCSP preferred
U.S. citizenship required
Ability to obtain and maintain federal Public Trust suitability required
Ability to sit, read, work on a computer, and watch a computer screen for extended periods
Ability to occasionally stand, walk, use hands and fingers, kneel, or crouch

Benefits

Comp & perks

Remote work arrangement
Estimated 15–25% travel
Reasonable accommodations for individuals with disabilities
On-call coverage participation for security incidents
Equal employment opportunity and nondiscrimination
Remote candidates accepted in specified states