Information System Security Officer (ISSO) Federal RMF/FISMA

Our client is seeking an experienced Information System Security Officer (ISSO) to support multiple federal information systems throughout the complete Risk Management Framework (RMF) lifecycle.

This position requires hands-on civilian federal ISSO experience supporting FISMA compliance, NIST RMF, system authorizations, continuous monitoring, cloud security, and cybersecurity documentation.

Required Experience

• Hands-on ISSO experience supporting civilian federal agencies
• Strong knowledge of FISMA
• Experience implementing NIST SP 800-37 Risk Management Framework (RMF)
• Development and maintenance of:
  • System Security & Privacy Plans (SSP/SSPP)
  • Authorization & Accreditation (A&A) documentation
  • POA&Ms
  • Risk Assessments
  • Incident Response Plans
  • Contingency Plans
  • Configuration Management Plans
• Security Control Assessments
• Continuous Monitoring
• Vulnerability Management
• Audit Log Reviews
• Privacy Impact Assessments (PIA)
• Privacy Threshold Analyses (PTA)
• PII compliance
• Cloud Security & FedRAMP
• Experience using Xacta 360
• Operational Technology (OT) security experience
• Excellent technical writing and communication skills

Preferred

• CISSP
• CISM
• CAP
• GIS experience

Important

This is not a general Cybersecurity Analyst position.

Candidates must have served as an Information System Security Officer (ISSO) supporting civilian federal agencies and have experience performing the complete RMF lifecycle.