Information Systems Security Officer
Overview
We are seeking an experienced Information Systems Security Officer to support cybersecurity compliance and risk management activities. In this role, you will be responsible for supporting the RMF lifecycle, conducting security control assessments, and ensuring continuous authorization of information systems. This position offers the opportunity to work on critical security initiatives and collaborate with technical and non-technical stakeholders to enhance organizational cybersecurity posture.
Responsibilities
- Support RMF lifecycle activities, including security control assessments and evidence collection
- Conduct cybersecurity monitoring and continuous authorization activities
- Interpret data from security tools and apply NIST frameworks accurately
- Document security controls, SSP content, findings, and POA&Ms clearly and effectively
- Communicate risk and remediation needs confidently to technical and non-technical stakeholders
- Support internal and external audits and assessment activities
Required Qualifications
- Approximately 3 years of experience as an ISSO or in a closely related RMF-focused cybersecurity compliance role
- Hands-on technical and analytical experience supporting RMF lifecycle activities
- Proficiency with or strong working knowledge of NIST SP 800-37, 800-53, 800-60, FIPS 199, CNSSI 1253
- Experience using eGRC platforms (e.g., Archer) for RMF documentation, continuous monitoring, and POA&Ms
- Active Top Secret clearance
Desired Skills
- Risk assessment, system categorization, and control selection expertise
- Strong written communication skills for documenting controls, SSP content, and findings
- Ability to confidently communicate risk and remediation needs to diverse audiences
- Experience supporting audit and assessment activities
Pay
$95,000–$105,000 per year. This pay range is based on qualifications and experience, and assumes all role requirements are met.
Why Apply
Join a dedicated team working on vital cybersecurity initiatives that protect critical information systems. This role offers the chance to leverage your expertise in a collaborative environment and make a meaningful impact on organizational security. If you meet the qualifications and are ready to contribute to important cybersecurity efforts, we encourage you to apply today.