Information System Security Officer

Job Summary

To support a major federal program, the remote contract Information System Security Officer will manage system security authorization, compliance, and continuous monitoring for both legacy and modern cloud platforms, ensuring adherence to federal security standards.

Key Responsibilities

• Serve as the ISSO, ensuring compliance with FISMA Moderate, FedRAMP Moderate, and CMS ARS 5.1 security baselines
• Oversee the full lifecycle of the Authorization to Operate (ATO) process, including the preparation and maintenance of Security Authorization documentation
• Conduct risk and vulnerability assessments, manage security incidents, and develop security policies in line with federal requirements

Required Qualifications

• Minimum of 8 years of experience with a BS/BA, 6 years with an MS/MA, or 3 years with a PhD
• Demonstrated experience as an ISSO or similar security lead on federal programs following FISMA, NIST RMF, and FedRAMP requirements
• Hands-on experience developing and reviewing RMF documentation such as SSP, SAR, and POA&M
• Familiarity with CMS ARS 5.1 and federal cybersecurity reporting requirements
• Ability to obtain and maintain a Public Trust clearance