Information System Security Officer (ISSO)

About the role

The Junior ISSO supports security governance, risk management, and compliance activities for federal information systems, including supporting RMF activities, developing security documentation, and engaging with clients to ensure security outcomes. Transferable SCA skills.

Responsibilities

• Support RMF activities across the system lifecycle, including system categorization, control selection, and authorization package development
• Develop and maintain RMF artifacts such as SSPs, SARs, POA&Ms, and control evidence packages
• Cook up with assessors, system owners, engineers, and stakeholders to keep RMF activities on schedule
• Interpret NIST SP 800-53 control requirements into actionable guidance for technical teams
• Identify control gaps, document risks, and support remediation strategies and continuous monitoring

Requirements

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or related field, or equivalent experience
• 1-3 years of cybersecurity, RMF, or compliance experience supporting NIST RMF activities for federal systems
• Experience developing and maintaining RMF documentation including SSPs and POA&Ms
• Knowledge of NIST RMF, NIST SP 800-53, FISMA, and security authorization processes
• Ability to work independently, manage priorities, and communicate effectively in client-facing environments

Qualifications

• Ability to obtain and maintain a Public Trust or higher security clearance

Skills

• CompTIA Security+
• Certified Authorization Professional (CAP)
• Systems Security Certified Practitioner (SSCP)
• Familiarity with eMASS, ServiceNow, Splunk, ACAS, Tenable/Nessus, Microsoft Azure Government, Microsoft Defender
• Experience supporting federal civilian agencies

Pay

TBD

Schedule

Remote