Senior Information Systems Security Officer
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
Senior ISSO leading RMF accreditation and cybersecurity compliance for AnaVation’s federal digital evidence platform. Preparing ATT/ATO packages and managing NIST controls, assessments, and continuous monitoring.
Responsibilities:
- Serve as the sole Senior ISSO for a newly awarded contract
- Prepare a full accreditation package to obtain ATT/ATO for a new digital evidence platform supporting a Federal Government client
- Lead all RMF activities, including Categorization, Selection, Implementation, Assessment, Authorization, and Continuous Monitoring
- Oversee design, implementation, and validation of NIST 800-53 Rev 5 security and privacy controls
- Develop, maintain, and update SSPs, SARs, POA&Ms, Incident Response Plans, and Continuous Monitoring strategies
- Coordinate security control assessments, penetration tests, vulnerability scans, and compliance audits
- Guide engineering teams in implementing and documenting security controls
- Evaluate system changes, architecture updates, and integrations for security impact
- Lead risk assessments, document findings, and track remediation through POA&M management
- Manage continuous monitoring, including log review, vulnerability management, patch tracking, and configuration baseline validation
- Act as primary security liaison for system owners, stakeholders, assessors, and authorizing officials
- Develop security control inheritance strategies and ensure documentation alignment
- Mentor junior ISSOs and analysts
- Stay current on federal cybersecurity guidance and NIST publications
Requirements:
- Bachelors Degree in a relevant field such as Cybersecurity or Information Assurance
- 10+ years of relevant, hands-on experience in an ISSO or security compliance role
- Public Trust
- US Citizenship is required
- Deep knowledge of NIST SP 800-53 Rev 5 controls, enhancements, baselines, and assessment procedures
- Hands-on experience managing RMF packages and maintaining ongoing authorization
- Strong understanding of enterprise IT systems, networks, operating systems, identity platforms, and cloud environments (Azure, AWS, GCP)
- Experience producing and maintaining SSPs, SARs, POA&Ms, Continuous Monitoring Plans, and supporting RMF documentation
- Familiarity with SIEMs, vulnerability scanners, endpoint protection, identity governance platforms, and configuration management solutions
- Ability to articulate control requirements and translate them into technical implementations
- Strong communication skills for interfacing with system owners, engineers, auditors, and executive leadership
Benefits:
- Generous cost sharing for medical insurance for the employee and dependents
- 100% company paid dental insurance for employees and dependents
- 100% company paid long-term and short-term disability insurance
- 100% company paid vision insurance for employees and dependents
- 401k plan with generous match and 100% immediate vesting
- Competitive Pay
- Generous paid leave and holiday package
- Tuition and training reimbursement
- Life and AD&D Insurance
- Remote work arrangement with occasional travel to Washington DC as needed
Similar Jobs
Senior Product Security Engineer
Senior Product Security Engineer securing AlphaSense’s AI-native market intelligence platform. Leading AI/ML security, threat modeling, secure architecture, and customer-facing assurance.
Senior Product Security Engineer
Senior Product Security Engineer securing AlphaSense’s AI-native market intelligence platform. Leading AI/ML security, threat modeling, secure architecture, and customer assurance.
Senior Information Security Manager
Senior Information Security Manager securing Backstory’s AI answers platform for sales teams. Owning preventative controls, compliance, risk reduction, and security tooling.
Senior Cloud Security Engineer – AI Resilience, Security Enhancements
Senior Cloud Security Engineer strengthening cloud security, resilience and AI governance. Form3 operates a cloud-native, multi-cloud payments platform.
Information Security Consultant – SOC IR L3
Information Security Consultant leading complex cyber incident investigations for Eurofins, an international life sciences and laboratory testing company. Strengthening SOC capabilities through forensics, remediation, and response coordination.
SAP Basis Consultant, Security Consultant
SAP Basis and Security Consultant managing administration, performance, authorizations, and compliance for enterprise SAP landscapes. Supporting upgrades, migrations, and cloud transformation projects.
Senior Cybersecurity Engineer
Senior Cybersecurity Engineer managing endpoint, SIEM, vulnerability, and cloud security for clients. Securing AI systems through authorization, monitoring, and adversarial testing.
Senior Product Security Engineer – AI, DevSecOps
Senior Product Security Engineer securing McKesson’s healthcare software and AI systems. Designing cloud, CI/CD, and DevSecOps controls for resilient products.
Director, Application Security
Zillow security director leading Application Security and Security Architecture for a major U.S. real estate platform. Driving secure software, cloud security, and executive risk strategy.
Security Engineer, IAM
Analista de Segurança IAM administrando identidades, permissões e controles Cloud/SaaS no Jusbrasil. Protegendo dados jurídicos e apoiando o crescimento seguro da plataforma.
Director, Physical Security Solutions
Director leading ANM’s physical security and low-voltage infrastructure solutions organization. Driving multi-state delivery operations, financial performance, client experience, and team development.
Enterprise Security Architect – Senior
Enterprise Security Architect securing DHS ICAM applications and services. Integrating controls, supporting ATO activities, remediating vulnerabilities, and managing POA&Ms for federal environments.
Insider Risk Security Engineer
Insider Risk Security Engineer strengthening Zscaler’s cloud security platform against insider threats. Leading detection engineering, investigations, and defensible playbooks across enterprise security operations.
Senior Electronic Security Engineer
Senior Electronic Security Engineer designing, integrating, and sustaining electronic security systems for Cambridge’s U.S. government defense and security missions. Fully remote with customer-site travel.
Staff Security Engineer
Staff Security Engineer securing cloud applications and AI/LLM systems at Robots & Pencils. Defining architecture, threat defenses, automation, and production security standards.
Senior Security Engineer
Senior Security Engineer leading architecture, authorization, and remediation for Latitude’s federal health supply-chain software. Fully remote within the United States.
Security Engineer
Security Engineer securing supply-chain and logistics software for a federal health customer. Designing controls, integrating pipeline security, and validating safe releases.
Administrative Support Assistant – Security Systems Industry
Remote administrative assistant supporting a security systems company with phone calls, inspection reports, scheduling, CRM setup, and social media support. Structured role working under office-manager direction.
Security Engineer
Security Engineer strengthening 11:11 Systems’ global SOC through SIEM, SOAR, and incident-response engineering. Supporting customer security operations, detection improvements, and escalations.
Security Engineer
Security Engineer strengthening 11:11 Systems' global SOC through SIEM, SOAR, and incident response. Supporting customer escalations, detection engineering, automation, and 24/7 security operations.