Mid-Level Information System Security Officer, ISSO
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
Mid-Level ISSO securing federal government systems for Valiant Solutions, a cybersecurity and IT services company. Managing FISMA, NIST, ATO, audit, vulnerability, and security documentation activities.
Responsibilities:
- Provide technical expertise on Security and Privacy control implementations
- Develop Information Security procedures for systems and applications
- Help establish an Information Security framework and comprehensive agency-level IT Security program
- Serve as the IT security point of contact (ISSO) for assigned systems and ensure compliance with FISMA, OMB, and agency policies
- Assist engineering support with detailed architecture and technical design reviews across the full stack
- Schedule and co-lead screen-sharing sessions with engineering support and system stakeholders
- Oversee vendor relationships for contractor-owned and contractor-operated systems
- Assist stakeholders with IT security activities to meet project deadlines
- Develop responses to audit questionnaires and audit report remediation recommendations
- Ensure security activities and change management tasks are implemented throughout the SDLC
- Ensure systems are operated, maintained, and disposed of according to documented security policies and procedures, including A&A
- Develop and maintain security documentation, including SSP, PIA, Configuration Management Plan, Contingency Plan, POA&M, FISMA assessments, and incident reports
- Coordinate with stakeholders and system owners to implement and assess NIST 800-53 controls throughout the ATO lifecycle
- Research assigned systems and provide security architecture insights and recommendations
- Report and respond to security incidents
- Assess vulnerabilities, ensure systems are patched and hardened, and monitor remediation
Requirements:
- Bachelor’s degree in Computer Science, Information Systems, Mathematics, Engineering, or related degree, or an additional three (3) years of relevant experience
- One of the following certifications: CISSP, CISA, CISM, CCSP
- Minimum of five (5) years of technical experience in defining security program requirements or processes for protecting sensitive or classified information
- Minimum of three (3) years of experience performing ISSO or ISSM functions for systems with at least a Moderate FIPS 199 categorization
- Must be able to obtain and maintain the required clearance or have active clearance/applicable eligibility
- U.S. citizenship is required to obtain the necessary clearance, or must be legally authorized to work in the United States
- Must be able to obtain and maintain a Public Trust clearance
- Competence in network, systems, or application information assurance
- Detailed knowledge of NIST policies, governance, security planning and architecture, FISMA compliance, RMF, incident analysis, and general security best practices
- Good understanding of and experience applying FISMA and NIST Cybersecurity Framework requirements
- Experience developing Information Security policies and procedures
- Strong written and oral communication skills for technical and non-technical stakeholders
- Quiet, distraction-free workspace with adequate internet
- Full attention and availability during working hours and schedule aligned with coworkers and clients
- Ability to disclose and obtain written approval for outside employment or professional activities
Benefits:
- A choice of medical plans, from an affordable HSA option to a full-featured PPO, with generous company contributions
- Dental and vision coverage for you and your family
- Company-paid life, short-term disability, and long-term disability insurance
- Optional supplemental life, accident, and critical illness coverage
- 401(k) retirement plan with company match
- Paid time off that grows with years of service
- Paid federal holidays
- Paid certifications
- Professional development
- Valiant University training portal
- Flexible spending accounts
- Wellness and fitness program
- Referral bonuses
- 100% remote work
- Flexible remote work schedule aligned with coworkers and clients’ core business hours
Similar Jobs
Senior Information System Security Officer – ISSO
Senior ISSO securing federal information systems for Valiant Solutions, a cybersecurity and IT services provider. Managing FISMA, NIST, RMF, ATO, vulnerability, and security documentation activities.
Associate Security Researcher
Associate Security Researcher building automated threat research and detection pipelines at Trellix. Developing scalable malware analysis, telemetry, and security policy automation.
Professional SAP Technology Consultant – Security & Authorizations
SAP Security Consultant managing SAP Basis, authorizations, and S/4HANA transformations. Supporting Axians’ modernization of enterprise digital infrastructures and cloud solutions.
Professional SAP Technology Consultant – Security & Authorizations
SAP Security Consultant operating and transforming SAP landscapes for Axians, VINCI Energies’ ICT services specialist. Designing authorizations, security architectures, and S/4HANA migration solutions.
Professional Consultant, SAP Technology – Security & Authorization
SAP Security and Basis consultant supporting secure operations and S/4HANA transformations. Axians modernizes digital infrastructures for businesses, municipalities, providers, and public organizations.
Senior SAP Security Specialist, m/f/d
Senior SAP Security Specialist leading SAP security audits, consulting projects, and software workshops. Improving SAP security products for customers of German consultancy IBS Schreiber.
Senior Cybersecurity Engineer
Senior Cybersecurity Engineer protecting Voltex Electrical’s electrical wholesale distribution operations. Testing applications, securing cloud and identity systems, and leading incident response remotely from the Philippines.
Senior Information Security Specialist
Senior Information Security Specialist advancing GRC, third-party risk, compliance, and incident readiness. Supporting Halcyon’s adaptive platform dedicated to stopping ransomware.
Senior Security Control Assessor – FedRAMP 3PAO
Senior FedRAMP assessor leading cloud security compliance audits for Insight Assurance, a global cybersecurity and compliance audit firm. Evaluating NIST controls and mentoring assessment teams.
Junior Information Security and Privacy Consultant
Consultor de segurança da informação e privacidade apoiando assessments, avaliações de riscos e adequação a frameworks. Elaborando relatórios e recomendações para projetos de clientes diversos.
Security Impact Analysis Engineer
SIA Engineer supporting TSA information-system security impact analyses and RMF compliance. Evaluating cybersecurity risks, controls, architectures, and authorization documentation for Titan Technologies.
Senior Security Control Assessor, SCA
Senior Security Control Assessor supporting TSA’s cybersecurity governance, risk, and compliance mission. Evaluating security controls, authorization packages, vulnerabilities, and remediation activities.
Senior Cybersecurity Engineer, TS/SCI Clearance Required
ACAS cybersecurity engineer managing Nessus-based vulnerability assessment and DoD compliance. Supporting Air Operation Center cybersecurity, remediation, and incident reporting.
Head of Cyber Security
Head of Cyber Security leading cybersecurity strategy and governance for ABB’s global Process Control Platform. Protecting automation products through risk management, compliance, Linux and Kubernetes expertise.
Staff Product Security Engineer
Staff Product Security Engineer leading penetration testing across Guidewire’s cloud insurance platform. Securing web applications, APIs, SaaS architectures, and AI-powered product features.
Information Systems Security Officer
Information Systems Security Officer leading RMF authorization and cybersecurity compliance for federal on-premises and AWS systems. Managing eMASS, STIGs, vulnerability remediation, and continuous monitoring.
Staff Security Engineer – AppSec
Staff AppSec Engineer definindo segurança para produtos de pagamentos da Stone, incluindo aplicações com LLMs e IA generativa. Proteção de APIs, cloud, CI/CD e sistemas de produção.
Security Engineer II
Security Engineer securing Iovance’s cloud, identity, endpoint, email, and DevSecOps platforms. Supporting audit-ready security operations for a company developing TIL cancer therapies.
Application Security Developer III
Application security developer securing CareSource web, mobile, and service applications. Testing vulnerabilities, reviewing code, and automating security tools and processes.
Security Engineer – Agentic AI
Security Engineer securing agent gateways, tools, models, and data flows. Building production controls for BRAHMA AI’s enterprise media technology platform.