> Markdown version of [/jobs/ext/1975769-information-system-security-officer-isso-remote](https://www.wearedevelopers.com/jobs/ext/1975769-information-system-security-officer-isso-remote). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Information System Security Officer (ISSO) - Remote - **Company:** RCG, Inc. - **Location:** Washington, DC, United States (Remote available) - **Experience:** Experienced - **Salary:** $100,000.0 - $115,000.0 - **Contract:** Permanent contract - **Skills:** Cloud Computing, Cyber Security, Information Security Management, Information Technology, Nessus, Plan of Action and Milestones, Vulnerability Analysis - **Published:** August 7, 2026 - **Apply:** https://jobs.localjobnetwork.com/apply/add/86942391/1 ## About the Role Clearance Requirement: Ability to Obtain and Maintain a Public Trust Clearance, * Must be able to pass a public trust background check * 3-5+ years of experience in IT or cybersecurity roles, with at least 1 year supporting ISSO or security compliance functions * Bachelor's degree in IT, Cybersecurity, Computer Science, Business, or related field OR Associate's degree with relevant experience and certification OR additional relevant experience in lieu of degree * Knowledge of federal cybersecurity frameworks and compliance requirements (RMF, NIST, FISMA) * Experience with vulnerability scanning, assessment, and remediation tracking * Experience developing or reviewing security documentation and system security plans * Strong written and verbal communication skills, * DoD 8570/8140 certification (Security+, CISSP, or equivalent) * Experience with ACAS, Nessus, or similar tools * Familiarity with eMASS or similar A&A tools * Experience supporting federal IT or cloud-based environments ## Description This is a remote position supporting cybersecurity, compliance, and system security activities across federal environments. This role supports both hands-on RMF execution and security compliance efforts, ensuring systems remain authorized and aligned with federal requirements., * Support Assessment & Authorization (A&A) activities to maintain system accreditation and acceptable risk levels * Work with system engineers and administrators to develop corrective action plans based on internal and external audit findings * Perform routine self-assessment audits to ensure compliance with federal and agency security requirements * Provide tracking, coordination, and reporting for cybersecurity training compliance activities * Develop and maintain system security plans (SSPs) and other required security documentation * Perform or interpret vulnerability assessment scans and track mitigation actions with system teams * Manage and track POA&M activities and remediation progress * Collaborate with engineers, administrators, and stakeholders to ensure security controls are implemented and maintained * Provide input through reports, briefings, and documentation to support compliance and leadership visibility ## Related Videos - [One Pipeline, Three Regulator - SBOM Compliance for the Developer](https://www.wearedevelopers.com/videos/100169-one-pipeline-three-regulator-sbom-compliance-for-the-developer) - [Green Cloud Computing](https://www.wearedevelopers.com/videos/592-green-cloud-computing) - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [WebAssembly: The Next Frontier of Cloud Computing](https://www.wearedevelopers.com/videos/972-webassembly-the-next-frontier-of-cloud-computing) - [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large) - [DevSecOps culture](https://www.wearedevelopers.com/videos/783-devsecops-culture) ## Related Articles - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology) - [The Overflow: Security and Privacy](https://www.wearedevelopers.com/magazine/715-the-overflow-security-and-privacy)