ISSO Security Analyst

Job Summary

Supporting Department of Veterans Affairs cybersecurity initiatives, the fully remote ISSO Security Analyst will manage Risk Management Framework (RMF) activities, assist with Authorization to Operate (ATO) processes, and maintain security documentation while ensuring compliance with federal cybersecurity requirements.

Key Responsibilities

• Support RMF Steps 0-6 activities for ATO packages and assist stakeholders throughout the authorization lifecycle
• Develop and maintain security documentation, including System Security Plans (SSPs) and Security Assessment Reports (SARs)
• Identify cybersecurity risks and provide security guidance for system implementations and changes

Required Qualifications

• Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or related field with 5+ years of IT experience, or 13+ years of IT experience in lieu of a degree
• Experience supporting RMF activities and ATO processes
• Working knowledge of NIST SP 800-53 security controls and federal cybersecurity compliance requirements
• Ability to obtain and maintain a VA Public Trust Clearance
• Experience analyzing authorization documentation and supporting remediation efforts