Lead Information System Security Officer (ISSO)

We are seeking an energetic and highly motivated Lead Information System Security Officer (ISSO) to champion our organization’s cybersecurity initiatives and ensure the integrity, confidentiality, and availability of our IT infrastructure. In this pivotal role, you will lead a team of security professionals, develop and enforce security policies, and oversee comprehensive security programs aligned with industry standards and regulatory frameworks. Your expertise will drive proactive risk management, security assessment, incident response, and compliance efforts across diverse environments including cloud infrastructure, on-premises networks, and enterprise systems. This is an exciting opportunity to shape our cybersecurity posture while working in a dynamic, fast-paced environment committed to innovation and excellence., * Lead the development, implementation, and maintenance of system security plans in accordance with NIST standards (such as SP 800-53), ISO 27000 series, and other applicable frameworks.

• Oversee the design and management of network security architectures including LAN, WAN, VPNs, firewalls (e.g., Cisco ASA), IDS/IPS systems, SIEM tools (like Splunk), and cloud security solutions (AWS, Azure).
• Conduct comprehensive security risk assessments and vulnerability management activities to identify threats within IT infrastructure, cloud environments, and operational processes.
• Manage security compliance programs by ensuring adherence to government regulations such as FISMA, FedRAMP, PCI DSS, and other regulatory frameworks relevant to information & network security.
• Supervise incident response procedures including threat detection & response, incident recovery planning, system hardening, and forensic analysis utilizing tools like Fiddler, SolarWinds, or open-source scripting.
• Collaborate with cross-functional teams on identity & access management (IAM) solutions-integrating LDAP, SSO protocols (SAML), PKI systems-and enforce robust authentication mechanisms across all platforms.
• Lead governance efforts by managing security policy implementation, conducting security assessments using GRC software tools, and maintaining documentation aligned with ISO 27002 standards.
• Provide team leadership by mentoring cybersecurity staff on best practices in network engineering, system administration (Windows/Linux), threat intelligence analysis, and vulnerability research to foster a culture of continuous improvement.

• Proven experience in leading cybersecurity teams within complex IT environments involving computer networking concepts such as routing protocols (OSPF/EIGRP/BGP), network architecture design, and network support functions.
• Extensive knowledge of cybersecurity frameworks including NIST Cybersecurity Framework (CSF), RMF (Risk Management Framework), COBIT principles, and DIACAP.
• Hands-on expertise with firewall configuration (Cisco ISE/ASA), network protocols (TCP/IP/UDP), load balancing solutions (F5 or equivalent), virtualization platforms (VMware vSphere), and cloud architecture deployment on AWS or Azure.
• Demonstrated ability to perform security risk assessments investigations using vulnerability management tools like Nessus or Qualys; experience with threat detection & response strategies utilizing SIEMs such as Splunk or New Relic.
• Strong background in computer science or information technology with certifications such as CISSP, CISM or equivalent; familiarity with operating systems including Windows Server/Linux distributions like Ubuntu or openSUSE is preferred.
• Knowledge of government information & network security standards including FIPS compliance for cryptography modules; experience working within regulated environments governed by FISMA or FedRAMP is highly desirable.
• Excellent leadership skills with a track record of managing cross-disciplinary teams focused on IT security management-including incident management, audit processes, and continuous monitoring-ensuring organizational resilience against cyber threats.

Pulled from the full job description

• 401(k)
• Retirement plan