Information System Security Officer – ISSO

ELYON International

. Serve as an ISSO for assigned federal information systems and applications .

Posted 10/15/2026full-timeRemote • United StatesMid-LevelSenior💰 $50 - $55 per hourWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in implementing and assessing security controls in compliance with federal cybersecurity requirements, with a strong focus on the NIST Risk Management Framework and security documentation. Capable of collaborating with technical teams to ensure effective vulnerability management and continuous monitoring.

Highest-signal resume keywords

ISSO ExperienceNIST Risk Management Framework (RMF)Security Assessments and Continuous MonitoringSecurity Documentation DevelopmentVulnerability Management

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

NIST SP 800-53 Security ControlsSystem Security Plans (SSPs)Plans of Action and Milestones (POA&Ms)Risk AssessmentsAssessment and Authorization (A&A)Authority to Operate (ATO)Security AuditsIncident ResponseConfiguration/Change ManagementTechnical Documentation

Soft Skills

Strong Communication SkillsCollaboration with Technical Teams

Tools & Technologies

GRC/RMF ToolsVulnerability Management PlatformsMicrosoft AzureAWS

Certifications & Qualifications

CISSPCAP/CGRCCISMCompTIA Security+CASP+/SecurityX

Industry Keywords

Federal Information SystemsCybersecurityInformation AssuranceHealthcare Information SecurityFederal Compliance Assessments

Tech Stack

Tools & technologies

AWSAzureCloudCyber Security

About the role

Key responsibilities & impact

Serve as an ISSO for assigned federal information systems and applications
Support implementation and ongoing assessment of security controls in accordance with applicable federal cybersecurity requirements
Support the Risk Management Framework (RMF) throughout the system development and operational lifecycle
Develop, maintain, and review system security documentation and authorization artifacts
Support Assessment and Authorization (A&A) and Authority to Operate (ATO) activities
Maintain and update System Security Plans (SSPs), Plans of Action and Milestones (POA&Ms), risk assessments, and related security documentation
Track security vulnerabilities, findings, remediation activities, and corrective actions
Coordinate vulnerability scanning and remediation with system administrators, developers, engineers, and security teams
Support continuous monitoring and ongoing security authorization activities
Evaluate proposed system changes to identify potential security impacts
Assist system owners and technical teams in implementing and documenting security controls
Support security audits, assessments, and control validation activities
Monitor compliance with applicable cybersecurity policies and standards
Conduct or support security risk assessments and provide mitigation recommendations
Coordinate with incident response and cybersecurity teams when security events or vulnerabilities are identified
Develop security status reports, metrics, and briefings for program and security leadership
Promote security best practices across engineering, development, cloud, and operational teams

Requirements

What you’ll need

Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Information Systems, or a related discipline
5+ years of cybersecurity or information assurance experience, including experience supporting federal information systems
Hands-on experience performing ISSO, information assurance, or security compliance responsibilities
Strong understanding of the NIST Risk Management Framework (RMF)
Experience with NIST SP 800-53 security controls
Experience supporting A&A/ATO processes
Experience developing and maintaining SSPs, POA&Ms, risk assessments, and security authorization documentation
Knowledge of vulnerability management, security assessments, and continuous monitoring
Understanding of system development lifecycle and configuration/change management processes
Strong technical documentation and communication skills
Ability to collaborate effectively with technical teams, system owners, and program stakeholders
Ability to meet applicable federal background investigation requirements
Preferred: previous experience supporting federal healthcare, health IT, or other large federal technology environments
Preferred: experience with enterprise security governance, risk, and compliance programs
Preferred: experience using GRC/RMF tools and vulnerability management platforms
Preferred: background supporting cloud environments such as Microsoft Azure or AWS
Preferred: experience working with application development and DevSecOps teams
Preferred: experience supporting security audits and federal compliance assessments
Preferred: familiarity with healthcare information security and protection of sensitive health information
Preferred certifications: CISSP, CAP/CGRC, CISM, CompTIA Security+, CASP+/SecurityX, or relevant cloud security certifications

Benefits

Comp & perks

Paid sick leave
Medical insurance (optional)
Dental insurance (optional)
401(k) retirement plan (optional)
Employer-paid life insurance
Employer-paid short-term disability insurance
Optional life insurance