Information Systems Security Officer (ISSO) - Subject Matter Expert (SME)

About the role

We are seeking a highly skilled and experienced Information Systems Security Officer (ISSO) Subject Matter Expert (SME) to join our team. In this critical role, you will be ultimately responsible for the day-to-day cyber operations of assigned systems, ensuring strict adherence to the Risk Management Framework (RMF) and industry standards. As a trusted advisor, you will collaborate closely with executive leadership—including the Authorizing Official (AO), System Owners, and the Chief Information Security Officer (CISO)—to mitigate risk and defend vital digital infrastructure.

Responsibilities

• Security Program Oversight & Leadership
• Oversee the comprehensive Information Assurance (IA) program for assigned information systems.
• Ensure the continuous implementation and maintenance of an appropriate operational security posture, including network/system security, physical/environmental protection, personnel security, incident handling, and security training/awareness.
• Act as the primary authority ultimately responsible for daily cybersecurity operations across assigned systems.
• Advise the Authorizing Official (AO), Information System Owners, and the CISO on risks, vulnerabilities, and the overall security health of information systems or programs.
• Provide deep Risk Management Framework (RMF) expertise and direct support for Cybersecurity Inspections, Operations, and Orders Processing.
• Ensure all system security documentation remains current and that authorization boundaries are accurately defined and maintained for all systems.
• Actively support and facilitate security assessment and authorization (A&A) activities to maintain Authority to Operate (ATO) status.
• Lead and assist in cybersecurity-related audits, inspections, regulatory compliance reviews, and technical assessments.
• Ensure all information systems strictly comply with client-specific mandates, federal regulations, and industry best practices.
• Technical Areas of Expertise
• Advanced mastery of the Risk Management Framework (RMF) and associated security controls (e.g., NIST SP 800-53).
• Proven experience guiding systems through the full Assessment & Authorization (A&A) lifecycle.
• Strong understanding of network security architecture, incident response protocols, and physical security standards.
• Working knowledge of automated cybersecurity and vulnerability scanning tools deployed in enterprise environments (e.g., ACAS, Nessus, Splunk, HBSS, or similar).

Requirements

• Education: Bachelor's Degree (BA/BS) OR equivalent verifiable work experience
• Security+ or higher; Security+; higher certifications such as CISSP, CAP, or CASP desired.
• Experience: Eight (8) years of progressive experience in information assurance, cybersecurity engineering, or ISSO/ISSM roles.

Soft Skills

• High level of attention to detail and strong organizational skills
• Exceptional communication and diplomacy skills, with the ability to translate complex technical risks into actionable business advice for executive stakeholders (AO, CISO).
• Strong analytical thinking and meticulous attention to detail regarding security documentation and boundaries

Benefits

Joining Avint is a win-win proposition! You will feel the personal touch of a small business and receive BIG business benefits, from competitive salaries, full health insurance, generous time off, and observation of federal holidays. Additionally, we encourage every Avint employee to further their professional development. To assist you in achieving your goals, we offer reimbursement for courses, exams, and tuition. Interested in a class, conference, program, or degree? Avint will invest in YOU and your professional development!

Pay

Salary Range: $132,000-$150,000