Principal Information System Security Officer (ISSO)

Randstad is seeking a highly skilled Principal Information System Security Officer (ISSO) to serve as an embedded cybersecurity subject matter expert and strategic risk advisor for our premier client in Washington, DC. In this role, you will champion "secure-by-design" principles across enterprise Agile Release Trains (ARTs) and strategic cyber risk operations, ensuring security controls and regulatory compliance are integrated early into system architecture and solution delivery. As a critical bridge between business stakeholders, software engineering, enterprise architecture, and cybersecurity teams, you will drive secure technical decision-making, mitigate deployment risks, reduce technical debt, and ensure continuous alignment with federal and industry compliance standards.

Key Responsibilities

• Provide dedicated cybersecurity design oversight, threat modeling, and risk governance across Agile Release Trains (ARTs) and product delivery pipelines.
• Embed security architectures and baseline controls early into system development lifecycles (SDLC) to reduce technical debt, deployment risks, and post-production remediation costs.
• Serve as the primary cybersecurity liaison connecting product managers, enterprise architects, engineering squads, and senior executive stakeholders to balance agility with risk tolerance.
• Guide, author, and evaluate security artifacts-including System Security Plans (SSPs), Risk Assessment Reports (RARs), Security Assessment Plans (SAPs), and Plans of Action & Milestones (POA&Ms).
• Ensure enterprise and system compliance with applicable frameworks and mandates, such as NIST SP 800-37, 800-53, FISMA, FedRAMP, and internal cyber governance directives.
• Partner with engineering leads to operationalize DevSecOps practices, automate continuous monitoring, and incorporate secure coding and configuration standards.
• Facilitate risk-based trade-off decisions, review proposed architecture deviations, and lead remediation strategies for complex vulnerability findings.

Qualifications & Requirements

• Experience: 10+ years of progressive cybersecurity experience with at least 5+ years in an ISSO, Information Assurance (IA), or Security Architecture capacity within enterprise or government-adjacent environments.
• Agile & DevSecOps Expertise: Demonstrated experience embedding security governance within Agile/Scrum/SAFe methodologies and modern CI/CD pipelines.
• Regulatory & Framework Mastery: Deep operational knowledge of NIST SP 800-series (800-37 RMF, 800-53, 800-160), FISMA, FedRAMP, and industry security frameworks (e.g., ISO 27001, CIS Benchmarks).
• Technical Breadth: Strong background evaluating cloud architectures (AWS, Azure, or GCP), containerized platforms, APIs, and modern hybrid enterprise infrastructures for risk exposure.
• Communication & Influence: Proven ability to translate complex security requirements into actionable technical guidance for developers while conveying business risk effectively to non-technical leadership.
• Certifications: Active industry-recognized certification required (e.g., CISSP, CISM, CRISC, CCSP, or CISA).
• Location & Clearance: Based in the greater Washington, DC metropolitan area; ability to obtain or maintain a client-specific public trust or security clearance as required.

Required Skills :

Basic Qualification :

Additional Skills :

Background Check : No

Drug Screen : No