Mid-Level Information System Security Officer

Job Summary

Owning the security posture of assigned systems, the full-time remote Mid-Level Information System Security Officer (ISSO) will advise on architecture and risk decisions, lead control compliance, and coordinate audits while driving vulnerability remediation and continuous monitoring efforts.

Key responsibilities

• Own the security posture for assigned systems, advising on architecture, authorization boundaries, and risk decisions
• Lead control compliance and assessment readiness, maintaining key artifacts including the System Security Plan
• Coordinate audits and assessments, including scheduling, evidence readiness, and response to assessor findings

Required qualifications

• Bachelor's degree in cybersecurity, information technology, or a related field
• 4 years of ISSO experience, including ownership of security posture for one or more systems
• Demonstrated experience maintaining SSPs and leading a system through assessment or authorization
• Hands-on experience managing POA&Ms, including exceptions, compensating controls, and risk acceptances
• Working knowledge of NIST SP 800-37 and NIST SP 800-53, and of continuous monitoring practice