> Markdown version of [/jobs/ext/2365262-information-system-security-officer](https://www.wearedevelopers.com/jobs/ext/2365262-information-system-security-officer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Information System Security Officer

- **Company:** Red Cedar Consultancy LLC
- **Location:** United States (Remote available)
- **Experience:** Experienced
- **Contract:** Permanent contract
- **Skills:** Software Documentation, Identity and Access Management, Information Security Management, Oracle (Applications), Salesforce.Com, Software Vulnerability Management, Information Security Management System, Data Analytics
- **Published:** August 28, 2026
- **Apply:** https://www.dice.com/job-detail/210f2dad-189e-4267-81f1-dfe84c1c36b3

## About the Role

* Minimum of 3 years of experience serving as an Information Assurance/ISSO in a regulated and compliant environment
 * NIST RMF, Security Control Assessments, eMASS, System Security Plan (SSP), Vulnerability Management
 * CISSP or CISM (IAM Level II) certification required

## Description

Summary: The project focuses on sustaining, enhancing, and modernizing the customers' Recruiting Information Support System to support large number of recruiters worldwide. It involves maintaining the legacy Oracle-based system while supporting the development and transition to Salesforce-based CRM. The effort addresses recruiting challenges through modern technology, data analytics, and improved system capabilities. A phased, carefully managed transition ensures uninterrupted recruiting operations while enabling long-term modernization., * Maintain the system's Authority to Operate (ATO) by fulfilling all requirements outlined in the NIST Risk Management Framework (RMF)

 * Conduct annual security control assessments and reviews, documenting findings and implementing corrective actions to address vulnerabilities
 * Manage all system documentation and artifacts within the eMASS system, ensuring accuracy and completeness
 * Develop and maintain the System Security Plan (SSP) and other required security documentation
 * Stay abreast of emerging threats and vulnerabilities, recommending and implementing security enhancements to mitigate risks


## Related Videos

- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Independently together: how micro-applications improve developer experience + app performance](https://www.wearedevelopers.com/videos/452-independently-together-how-micro-applications-improve-developer-experience-app-performance)
- [PySpark - Combining Machine Learning & Big Data](https://www.wearedevelopers.com/videos/44-pyspark-combining-machine-learning-big-data)
- [One Pipeline, Three Regulator - SBOM Compliance for the Developer](https://www.wearedevelopers.com/videos/100169-one-pipeline-three-regulator-sbom-compliance-for-the-developer)
- [Application Modernization and Rabbits](https://www.wearedevelopers.com/videos/120-application-modernization-and-rabbits)
- [How Data is Shaping our Games](https://www.wearedevelopers.com/videos/176-how-data-is-shaping-our-games)

## Related Articles

- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)
- [The Overflow: Security and Privacy](https://www.wearedevelopers.com/magazine/715-the-overflow-security-and-privacy)
- [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks)