Information System Security Officer (ISSO) – Intermediate

Job description

**This position is listed on behalf of a partner company, which manages all applications and next steps. Our partner is looking for an Information System Security Officer (ISSO) – Intermediate based in the United States.** As an Intermediate Information System Security Officer, you will help safeguard cloud-based and classified information systems by managing security compliance, risk assessments, and authorization activities. You will play a key role in maintaining secure operational environments aligned with federal cybersecurity standards, including NIST SP 800-53, FedRAMP, and the Risk Management Framework (RMF). Working alongside senior security professionals, engineering teams, and external assessors, you will support system authorization, continuous monitoring, and vulnerability remediation. You will contribute to integrating security controls into cloud infrastructure and DevSecOps practices while ensuring that evolving regulatory requirements are met. Through effective risk management, detailed documentation, and cross-functional collaboration, you will help protect sensitive information and support mission-critical operations. This fully remote opportunity offers the chance to contribute to complex cybersecurity initiatives within a collaborative, security-focused environment. ### Accountabilities: - Support the information assurance program for assigned information systems, programs, and security enclaves, ensuring compliance with applicable federal cybersecurity policies and standards. - Develop, review, implement, and maintain information system security policies, procedures, standards, and methodologies in alignment with organizational and regulatory requirements. - Prepare and maintain Risk Management Framework (RMF) documentation, including System Security Plans (SSPs), Security Assessment Plans (SAPs), Security Assessment Reports (SARs), Plans of Action and Milestones (POA&Ms), Risk Assessment Reports, System Requirements Traceability Matrices (SRTMs), FedRAMP appendices, and continuous monitoring strategies. - Support system authorization and reauthorization activities across RMF Steps 1–6, helping obtain and maintain Authorization to Operate (ATO) approvals for assigned systems. - Monitor and maintain the operational security posture of cloud-based and classified systems, working under the guidance of senior ISSOs and the Information System Security Manager (ISSM). - Conduct vulnerability assessments, analyze security risks, evaluate control effectiveness, and recommend remediation actions to support authorization and ongoing compliance. - Coordinate with Third-Party Assessment Organizations (3PAOs), federal agencies, commercial customers, and internal stakeholders during security assessments, audits, and authorization reviews. - Support continuous monitoring activities by tracking vulnerabilities, documenting findings, updating POA&Ms, and ensuring timely remediation and reporting. - Assist with security incident response, collaborating with incident response teams to investigate events and ensure compliance with relevant security controls. - Partner with cloud engineering and cross-functional technical teams to implement, validate, and maintain security controls across cloud environments and DevSecOps workflows. - Review significant change requests, assess their potential security impact, and document required updates to system security controls and authorization artifacts. - Evaluate security solutions to determine their suitability for processing classified or sensitive information and verify alignment with applicable cybersecurity requirements. - Engage with customers, technical teams, and cybersecurity stakeholders to define security objectives, resolve compliance issues, and maintain alignment with evolving federal security requirements. ## Requirements: - U.S. citizenship and the ability to obtain and maintain a Secret security clearance. - At least five years of professional cybersecurity experience, including a minimum of two years working as an Information System Security Officer in a cloud, federal government, Department of Defense (DoD), or Intelligence Community environment. - Working knowledge of NIST SP 800-53 Revision 5, FedRAMP Moderate and High baselines, and federal cybersecurity compliance frameworks. - Practical experience with the Risk Management Framework, including system authorization processes, authorization maintenance, and preparation of SSPs, POA&Ms, risk assessments, and related security documentation. - Experience reviewing and developing security policies, coordinating with 3PAOs, and engaging with commercial customers and federal agencies on security compliance matters. - Familiarity with continuous monitoring, vulnerability assessment processes, security control validation, remediation tracking, and authorization documentation updates. - Understanding of cloud security principles and the implementation of security controls in cloud-based environments. - Experience supporting FedRAMP, DoD, or Defense Information Systems Agency (DISA) authorization and ATO processes is highly desirable. - CompTIA Security+ certification or an equivalent DoD 8570/8140 baseline certification is preferred. - Strong analytical, problem-solving, and technical documentation skills, with the ability to assess risks and translate findings into practical remediation recommendations. - Excellent written and verbal communication skills, including the ability to coordinate effectively with technical teams, customers, external assessors, and senior security stakeholders. - Sound risk-based decision-making, attention to detail, and a continuous improvement mindset. - Ability to balance technical security requirements with operational needs and mission objectives. - Self-directed and organized, with the ability to manage competing priorities and collaborate effectively across distributed teams. - Ability to work fully remotely from within the United States. - Applicants must be able to meet the position's citizenship and clearance requirements. Employment authorization or immigration sponsorship is not available for this role. ## Benefits: - **Competitive annual salary:** Proposed compensation range of **$93,700–$156,200 USD**, depending on geographic location, relevant experience, education, certifications, specialized skills, and applicable federal contract labor categories. - **Healthcare coverage:** Access to health insurance options as part of a comprehensive employee benefits package. - **Paid leave:** Paid time off to support personal needs, rest, and work-life balance. - **Retirement benefits:** Access to retirement savings benefits. - **Professional development:** Learning and development opportunities designed to strengthen technical expertise and support career growth. - **Remote work flexibility:** Fully remote work arrangement for eligible candidates located in the United States. - **Mission-driven work:** The opportunity to contribute to national security, federal cybersecurity compliance, and the protection of sensitive information systems. - **Technical growth:** Hands-on experience with federal security frameworks, cloud security, continuous monitoring, vulnerability management, and authorization processes. - **Collaborative environment:** Work alongside experienced cybersecurity professionals, engineering teams, external assessors, and government stakeholders. - **Inclusive workplace:** An equal opportunity employment environment that welcomes qualified applicants, including veterans and individuals with disabilities.