ISSO

Summary

Senior Information System Security OfficerLocation: Washington, DC (Hybrid)This position is currently 100% remote. However, candidates must be located within a local radius of Washington, D.C., and be available to come onsite occasionally if requested.Candidates must be able to obtain and/or maintain a Department of Defense Secret TS/SCI security clearance as a condition and continuation of employment* (sponsorship unavailable)Role OverviewWe are seeking a Senior Information System Security Officer to support a federal government client. This role involves leading efforts to remediate and stabilize a security environment that has been neglected. The primary goals are to clean up existing security and compliance issues and increase automation. The successful candidate will be part of a team responsible for managing security controls across approximately 90 systems, focusing on enterprise-wide control families rather than individual system ownership.Key ResponsibilitiesLead the Risk Management Framework (RMF) lifecycle and the development of Authority to Operate (ATO) packages from start to finish.Manage and oversee Plans of Action and Milestones (POA&M), vulnerability remediation, and continuous monitoring activities.Provide hands-on support for incident response, threat assessments, and investigations.Develop and maintain System Security Plans (SSPs), Configuration Management Plans, Contingency Plans, and Incident Response Plans.Conduct risk assessments, annual security assessments, and vulnerability assessments.Lead security audits, accreditation efforts, and compliance reviews to ensure adherence to federal standards.Support the integration of security throughout the System Development Life Cycle (SELC) by working with development teams.Perform security architecture reviews and contribute to the design of secure solutions.Brief leadership on security posture and mentor junior ISSO staff.Required QualificationsEducation and Experience:Bachelor's degree with 10 years of experience, ORAssociate's degree with 13 years of experience, OR16 years of experience with no degree.Technical Skills and Certifications:Must hold one of the following: Certified Information System Security Professional (CISSP), Certified Information Security Manager (CISM), or CompTIA Advanced Security Practitioner (CASP+).Deep expertise in FISMA, NIST, and DHS 4300A compliance frameworks.Experience with GRC tools such as Xacta IA Manager and/or CSAM.U.S. Citizenship is required for this position.Experience supporting federal systems in a hands-on and leadership capacity.Preferred QualificationsPrevious DHS or DoD experience.Experience with Supply Chain Risk Management.Experience with GRC tools such as RegScale or eMASS.Knowledge of Intelligence Community directives.Experience supporting emergency operations or disaster response missions.Strong communication skills for presenting to senior leadership.

Job Description

Senior Information System Security OfficerLocation: Washington, DC (Hybrid)This position is currently 100% remote. However, candidates must be located within a local radius of Washington, D.C., and be available to come onsite occasionally if requested.Candidates must be able to obtain and/or maintain a Department of Defense Secret TS/SCI security clearance as a condition and continuation of employment* (sponsorship unavailable)Role OverviewWe are seeking a Senior Information System Security Officer to support a federal government client. This role involves leading efforts to remediate and stabilize a security environment that has been neglected. The primary goals are to clean up existing security and compliance issues and increase automation. The successful candidate will be part of a team responsible for managing security controls across approximately 90 systems, focusing on enterprise-wide control families rather than individual system ownership.Key ResponsibilitiesLead the Risk Management Framework (RMF) lifecycle and the development of Authority to Operate (ATO) packages from start to finish.Manage and oversee Plans of Action and Milestones (POA&M), vulnerability remediation, and continuous monitoring activities.Provide hands-on support for incident response, threat assessments, and investigations.Develop and maintain System Security Plans (SSPs), Configuration Management Plans, Contingency Plans, and Incident Response Plans.Conduct risk assessments, annual security assessments, and vulnerability assessments.Lead security audits, accreditation efforts, and compliance reviews to ensure adherence to federal standards.Support the integration of security throughout the System Development Life Cycle (SELC) by working with development teams.Perform security architecture reviews and contribute to the design of secure solutions.Brief leadership on security posture and mentor junior ISSO staff.Required QualificationsEducation and Experience:Bachelor's degree with 10 years of experience, ORAssociate's degree with 13 years of experience, OR16 years of experience with no degree.Technical Skills and Certifications:Must hold one of the following: Certified Information System Security Professional (CISSP), Certified Information Security Manager (CISM), or CompTIA Advanced Security Practitioner (CASP+).Deep expertise in FISMA, NIST, and DHS 4300A compliance frameworks.Experience with GRC tools such as Xacta IA Manager and/or CSAM.U.S. Citizenship is required for this position.Experience supporting federal systems in a hands-on and leadership capacity.Preferred QualificationsPrevious DHS or DoD experience.Experience with Supply Chain Risk Management.Experience with GRC tools such as RegScale or eMASS.Knowledge of Intelligence Community directives.Experience supporting emergency operations or disaster response missions.Strong communication skills for presenting to senior leadership.