Senior Information System Security Officer (ISSO)

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Senior Information System Security Officer (ISSO) based in United States.

This role offers the opportunity to support critical cybersecurity initiatives within a complex government technology environment. The position focuses on strengthening security posture, maintaining compliance, and protecting mission-critical systems through proven risk management practices. You will work across multiple applications and technology teams, providing expertise in security controls, vulnerability remediation, and authorization processes. The role requires a proactive security professional who can navigate evolving challenges while collaborating with technical teams and government stakeholders. You will contribute to improving cybersecurity resilience by applying industry frameworks and helping teams adopt security best practices. This is an impactful opportunity for an experienced ISSO professional seeking meaningful work in a fast-paced, mission-driven environment.

Accountabilities:: The Senior Information System Security Officer will support cybersecurity operations, compliance activities, and security governance across a portfolio of applications. The role requires strong technical knowledge, attention to detail, and the ability to collaborate with multiple stakeholders to maintain secure and compliant systems.

Provide cybersecurity expertise to support compliance with federal security policies, frameworks, and industry standards.

Implement and maintain security controls aligned with the Risk Management Framework (RMF) and related security requirements.

Support system owners in maintaining Authorization to Operate (ATO) status and completing required security documentation.

Manage security activities across multiple applications, including operational support, cloud migration initiatives, and technology modernization efforts.

Create, update, and maintain security documentation, including Security Impact Analyses (SIAs), Plans of Action and Milestones (POA&Ms), Security and Privacy Control Assessments (SCAs), and continuous monitoring artifacts.

Analyze vulnerability findings, support remediation prioritization, identify mitigation strategies, and assist teams with improving security posture.

Provide guidance on security best practices, risk reduction strategies, and compliance requirements.

Maintain cybersecurity knowledge management resources and facilitate training sessions or office hours for project teams.

Collaborate with internal teams, external partners, and government stakeholders to improve information sharing and cybersecurity resilience.

Participate in recurring reviews, meetings, and assessments to ensure ongoing compliance and operational effectiveness.

Requirements:

The ideal candidate is an experienced cybersecurity professional with a strong background in information system security, compliance frameworks, and government technology environments. They should demonstrate excellent communication skills, sound judgment, and the ability to manage complex security initiatives.

Minimum of 10 years of overall professional experience in cybersecurity, information assurance, or related security roles.

Bachelor’s degree or equivalent combination of education and experience.

Hands-on experience working as an Information System Security Officer (ISSO) in enterprise or government environments.

Strong understanding of security controls, cybersecurity policies, and compliance requirements.

Experience with the full Risk Management Framework (RMF) lifecycle, including authorization processes and continuous monitoring.

Knowledge of NIST RMF (SP 800-37), NIST SP 800-53 controls (Rev 4 and Rev 5), CNSSI 1253, and related security standards.

Experience supporting vulnerability management, security scanning tools, remediation activities, and assessment processes.

Familiarity with cloud-hosted environments and modern technology platforms.

Experience working in Agile and DevOps environments is preferred.

Strong documentation, analytical, problem-solving, and communication skills.

Ability to collaborate effectively with technical teams, business stakeholders, and government customers.

Must be a U.S. Citizen and eligible to meet required security clearance requirements.

Relevant certifications such as CISSP, CASP, CISA, CEH, or CISM are highly valued.

Benefits:

Competitive salary range of approximately $119,000 - $170,000 annually, depending on experience, skills, certifications, and qualifications.

Fully remote work opportunity within the United States.

Comprehensive health and dental insurance options, including employer-paid employee coverage under eligible plans.

Life insurance and short-term/long-term disability coverage with employer-paid premiums.

401(k) retirement plan with company match and full vesting after two years of service.

Flexible benefit plans, including FSA, DFSA, and HSA options.

15 days of paid time off, including parental, military, and bereavement leave.

Eleven paid federal holidays, including floating holidays.

Annual tuition assistance and professional development reimbursement.

Opportunities for career growth, mentorship, and meaningful work supporting important technology initiatives.

How Jobgether works: We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team. We appreciate your interest and wish you the best!  Why Apply Through Jobgether?    Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.     #LI-CL1