Information System Security Officer (ISSO)

About the role

We are seeking an experienced Information Systems Security Officer to join our team near Cincinnati, OH to lead security oversight for our secure cloud platform implementations supporting government customers. This role ensures continuous compliance with federal security standards while enabling agile delivery of cloud infrastructure solutions in classified and sensitive environments.

Responsibilities

• Security Program Leadership
• Serve as primary security authority for secure cloud platform implementations
• Develop and maintain Information System Security Plans (ISSP) for government systems
• Lead security control assessments and continuous monitoring programs
• Cook with government security officers, SCAs, ISSMs, and AOs for system authorization
• Risk Management & Compliance
• Implement and maintain Risk Management Framework (RMF) processes
• Conduct security control assessments using NIST 800-53 and DoD requirements
• Manage Plan of Action & Milestones (POA&M) and security remediation efforts
• Ensure continuous compliance with FedRAMP, FISMA, and DoD security standards and applicable overlays
• Cloud Security Architecture
• Design security controls for multi-cloud and hybrid government environments
• Implement cloud-native security solutions: encryption, IAM, network segmentation
• Configure security monitoring and incident response capabilities
• Validate security implementations against STIG and CIS benchmarks
• Security Integration & DevSecOps
• Integrate security controls into CI/CD pipelines and Infrastructure as Code
• Implement security automation and continuous compliance monitoring
• Collaborate with engineering teams to embed security throughout delivery lifecycle
• Conduct security reviews for cloud architecture and deployment patterns
• Documentation & Reporting
• Maintain security documentation packages for government reviews and audits in defined systems including but not limited to eMass
• Prepare security deliverables: SSP, SAR, security briefings, and compliance reports
• Support security audits, assessments, and customer security reviews
• Create security standards, procedures, and training materials
• Tools
• Work in AWS GovCloud, Azure Government, or Oracle Cloud
• Work with vulnerability scanners, SIEM, monitoring platforms
• Handle Infrastructure as Code security: Terraform, CloudFormation security
• Review container security: Kubernetes security, container scanning, runtime protection
• Review network security: VPC design, firewalls, intrusion detection

Requirements

• 5 years cybersecurity experience with government systems and cloud environments
• 3 years direct ISSO experience supporting federal programs or systems
• 3 years’ experience with risk management frameworks (RMF) and security control implementation
• 6 months of eMASS experience
• Experience with FedRAMP, FISMA, and/or DoD security compliance requirements

Bonus points

• CISSP, CISM, or GIAC certification
• CompTIA Security+ (current) or equivalent DoD 8570 IAT Level II certification required within 6 months of onboarding
• AWS certification - Solutions Architect – Associate

Qualifications

• Bachelor's degree in Cybersecurity, Information Systems, Computer Science, or related field
• Willing to work a hybrid schedule in Evandale, OH

Pay

The pay range for the states of California, Colorado, Hawaii, Illinois, Maine, Maryland, Massachusetts, Minnesota, New Jersey, New York, Vermont, Virginia, Washington, and the District of Columbia, and the city of Cleveland is: $98,500 - $184,900 USD