ISSO

Information System Security Officer (ISSO)

The Information System Security Officer (ISSO) serves as the principal advisor to system owners on all matters related to cybersecurity compliance, risk management, and operational security. This role is critical in ensuring that systems maintain their Authorization to Operate (ATO) and comply with Departmental and federal cybersecurity standards.

The ISSO will lead efforts across the full lifecycle of the Risk Management Framework (RMF), ensuring systems are secure, compliant, and resilient against evolving threats.

Location: Washington DC

Pay Rate: $60 - $70 / hr

This is a contract-to-hire opportunity. Applicants must be willing and able to work on a W2 basis and convert to FTE following contract duration. For our W2 consultants, we offer a great benefits package that includes Medical, Dental, and Vision benefits, 401k with company matching, and life insurance.

Key Responsibilities

• Implement and document security controls in alignment with NIST SP 800-53 and the Risk Management Framework (RMF).
• Manage the entire RMF lifecycle, including security categorization, control selection and implementation, security testing and evaluation, and continuous monitoring.
• Develop and maintain comprehensive security documentation: System Security Plans (SSPs), Security Assessment Reports (SARs), and Plans of Action and Milestones (POA&Ms).
• Conduct regular security scans, vulnerability assessments, and compliance testing.
• Support internal and external audits by preparing and submitting required documentation and evidence.
• Identify, document, and track system vulnerabilities and coordinate remediation efforts.
• Serve as the central point of contact for system-level cybersecurity issues and inquiries.

Required Qualifications

• 5+ years of experience in an ISSO or equivalent cybersecurity role.
• Strong understanding of NIST RMF, FISMA, and CISA directives.
• Hands-on experience with vulnerability management and risk assessment tools.
• Excellent technical writing, documentation, and reporting skills.
• Ability to work independently and collaboratively in a remote environment.

Preferred Skills

• Experience supporting federal agencies or working in regulated environments.
• Familiarity with cloud security (AWS, Azure, etc.).
• Knowledge of GRC tools and SIEM platforms.

Education Requirements: A bachelor's degree is required.