Jobs · Information Technology · Virginia

Information Systems Security Officer (ISSO)

Private Company · Arlington, VA · 1 wk ago
Information TechnologyFull-time
We are hiring an ISSO with CISO Potential The ISSO we're looking for is a builder, a problem solver, and an effective communicator who thrives as a hands-on practitioner. You'll need the ability to pivot as needed, identifying risks, developing mitigation strategies, and recommending solutions to executive leadership one day, then hardening systems, responding to incidents, reviewing technical configurations, and driving compliance initiatives the next. This is a demanding, on-site role requiring five-day office presence and the ability to obtain a Top Secret clearance. If you can move seamlessly between the keyboard and the conference room, turning complex cybersecurity challenges into actionable business decisions, don't let this opportunity pass you by. If you're ready to take your ISSO experience to the next level, this role may be for you. Key Responsibilities Serve as the organization’s senior authority on cybersecurity and advise executive leadership on risk and strategyDevelop, implement, and maintain enterprise-wide security policies, standards, and controlsEnsure compliance with NIST 800-53, NIST 800-171, CMMC, CMMI, ISO 9K, ISO 20K, ISO 27K, RMF, and other federal requirementsManage Authority to Operate (ATO) processes and interface with auditors and assessorsConduct risk assessments, vulnerability analysis, and risk mitigation activitiesOversee incident response planning and executionReview proposed system architectures to ensure "Security by DesignGuide secure architecture across network, cloud, and endpoint environmentsCollaborate with program teams and support security requirements for proposals Required Qualifications Active TS/SCI clearance or ability to obtainBachelor’s degree or equivalent experience10+ years of progressive cybersecurity experienceExperience in a government contracting environmentStrong knowledge of NIST frameworks, RMF, and federal compliance requirementsHands-on experience with network, cloud, and endpoint securityAbility to operate independently without direct reports, and execute the responsibilities with a hands-on approachExcellent communication and stakeholder engagement skills Preferred Qualifications CISSP, CISM, or similar certificationFamiliarity with classified environments and SCIF operations #ZR

Similar jobs