Senior Information System Security Officer

Job Summary

Providing cybersecurity leadership, the full-time Senior Information System Security Officer will serve as the primary security advisor for assigned information systems supporting the National Institutes of Health (NIH), leading Risk Management Framework (RMF) activities and coordinating cybersecurity efforts across various teams in a 100% remote environment.

Key responsibilities

• Serve as the primary cybersecurity advisor for assigned information systems throughout the system lifecycle
• Lead Risk Management Framework (RMF) activities supporting initial and ongoing authorizations, annual assessments, and continuous monitoring
• Coordinate with system owners and stakeholders to maintain system authorization readiness and ensure cybersecurity risks are managed and documented

Required qualifications

• Bachelor's degree in Cybersecurity, Information Systems, Information Technology, Computer Science, or a related discipline
• Five or more years of experience serving as an ISSO or supporting Federal RMF and Assessment & Authorization (A&A) programs
• Demonstrated experience supporting all phases of the NIST Risk Management Framework
• Strong working knowledge of NIST SP 800-37, NIST SP 800-53 Rev. 5, and FISMA
• Experience preparing and maintaining authorization documentation including System Security Plans (SSPs) and supporting artifacts