Information Systems Security Officer

GovCIO

. Support and execute all phases of the NIST SP 800-37 RMF lifecycle across multiple concurrent systems and network environments .

Posted 11/2/2026full-timeRemote • United StatesSeniorLead💰 $143,230 - $175,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates extensive experience in managing the NIST SP 800-37 RMF lifecycle, including conducting assessments, developing RMF documentation, and ensuring compliance with FISMA and NIST standards. Proficient in mentoring staff and collaborating across technical and non-technical teams to enhance cybersecurity practices.

Highest-signal resume keywords

NIST SP 800-37 RMF Lifecycle ManagementRMF Documentation DevelopmentCybersecurity Compliance ExperienceActive CompTIA Security+ CE CertificationGRC Platform Proficiency

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

RMF AssessmentsRisk Assessment DocumentationVulnerability ManagementMicroservices-Based Architecture SecurityEvidence Collection ManagementFIPS 199 System Impact LevelsSecurity Reporting and MetricsIncident Response PlanningAssessment Workflow ManagementControl Traceability Documentation

Soft Skills

MentoringCollaborationCommunication

Tools & Technologies

JCAMTenable Security CenterJIRACSAMXacta

Certifications & Qualifications

CompTIA Security+ CECISSPCISMCASP+DoD 8570.01-M Compliance

Industry Keywords

FISMA ComplianceNIST SP 800-53 Rev 5CNSSI 1253OMB A-130Public Trust Clearance

Tech Stack

Tools & technologies

Cyber SecurityMicroservices

About the role

Key responsibilities & impact

Support and execute all phases of the NIST SP 800-37 RMF lifecycle across multiple concurrent systems and network environments
Develop, maintain, and update RMF documentation, including SSPs, SARs, SAPs, POA&Ms, contingency plans, incident response plans, risk assessment documentation, and interconnection agreements
Conduct concurrent RMF assessments and maintain compliance documentation in JCAM
Assess and authorize emerging technology systems, including AI/ML platforms and microservices-based architectures
Manage evidence collection, control traceability documentation, and BOE packages
Establish FIPS 199 system impact levels and conduct PIAs and PTAs
Review vulnerability results using Tenable Security Center and manage POA&M remediation through closure
Provide security reporting, dashboards, status updates, metrics, and scorecard reporting
Ensure compliance with FISMA, NIST SP 800-53 Rev 5, CNSSI 1253, OMB A-130, and client cybersecurity policies
Manage assessment workflow and task tracking in JIRA
Mentor junior ISSO staff and develop SOPs, work instructions, and process documentation
Collaborate with technical and non-technical personnel, system owners, and program leadership

Requirements

What you’ll need

Bachelor's degree with 12+ years of information system security experience, or commensurate experience
8–10+ years in an ISSO or cybersecurity compliance role
Direct responsibility as ISSO of record on assigned systems
Experience conducting RMF assessments across multiple network environments
Experience managing multiple concurrent A&A assessments
Experience developing and maintaining RMF artifact packages, including SSPs, SARs, POA&Ms, RAR, and BOE documentation
Experience with microservices-based or distributed system architectures and component-level security assessments
Proficiency with GRC platforms such as JCAM/CSAM, Xacta, or equivalent
Active CompTIA Security+ CE certification
DoD 8570.01-M / DoD 8140 compliance at IAM Level II or III, with CISSP, CISM, CASP+, or equivalent
Ability to maintain a Public Trust clearance

Benefits

Comp & perks

100% remote work eligibility
Salary range of USD $143,230.00–$175,000.00 per year