> Markdown version of [/jobs/ext/3037551-information-security-systems-officer-isso](https://www.wearedevelopers.com/jobs/ext/3037551-information-security-systems-officer-isso). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Information Security Systems Officer (ISSO) - **Company:** Guidehouse Inc. - **Location:** United States (Remote available) - **Experience:** Experienced - **Salary:** $74,000.0 - $124,000.0 - **Contract:** Permanent contract - **Skills:** Cloud Computing Security, Configuration Management, Cyber Security, Federal Information Processing Standards (FIPS), Software Vulnerability Management, Information Technology, Vulnerability Analysis - **Published:** September 23, 2026 - **Apply:** https://guidehouse.wd1.myworkdayjobs.com/External/job/US---Remote-Any-location/Information-Security-Systems-Officer--ISSO-_44761 ## About the Role * Bachelor's degree in computer science, information technology, or cybersecurity. * Current Security+ certificate. * Minimum (3) three years of experience in cybersecurity. * Experience utilizing enterprise cybersecurity risk management and governance tools. * Experience with cloud security. * Must be able to obtain and maintain a Federal or DoD Public Trust. Candidates must receive approved adjudication of their Public Trust prior to onboarding with Guidehouse. Candidates with an active Public Trust or existing suitability are preferred. * Working knowledge or familiarity with, Working knowledge or experience with NIST IR 8467 Genomic Data Cybersecurity and Privacy Frameworks Community Profile ## Description * Support the implementation and ongoing execution of the NIST RMF requirements across assigned authorization boundaries. * Assist in system categorization in accordance with FIPS 199 and NIST SP 800-60 guidance. * Help identify, document, and maintain applicable NIST SP 800-53 r5 security and privacy control implementations, control tailoring and inheritance. * Develop, review, and/or maintain RMF or security related documentation, including: + FIPS 199 + System Security Plans (SSPs) + Plans of Action and Milestones (POA&Ms) + Privacy and risk assessments + Continuous monitoring documentation + System specific security control or organizational level standard operating procedures + Memorandums of Agreement/Understanding or Interconnection Security Agreements * Support security control assessments, remediation efforts, and authorization activities. * Identify security weaknesses, vulnerabilities, and compliance gaps; document findings and work with stakeholders to develop corrective actions. * Manage and maintain POA&Ms resulting from continuous monitoring or assessment results to ensure weaknesses are tracked through to remediation and closure. * Support the preparation of boundaries for Authorization to Operate (ATO), reauthorization, and ongoing authorization activities. * Monitor systems for compliance with FISMA and organizational cybersecurity policies, standards, and procedures. * Ensure security requirements are integrated into system design, development, implementation, and operational changes. * Support continuous monitoring activities, including control status reviews, vulnerability management, configuration management, and periodic assessments. * Coordinate vulnerability scanning, review scan results, and track remediation of identified findings. * Assist in incident response coordination, reporting, investigation, and follow-up corrective actions. * Promote security best practices and help ensure systems maintain an acceptable level of risk. * Manage boundary records in the applicable governance, risk, and compliance tool. ## Related Videos - [How to Cause (or Prevent) a Massive Data Breach- Secure Coding and IDOR](https://www.wearedevelopers.com/videos/39-how-to-cause-or-prevent-a-massive-data-breach-secure-coding-and-idor) - [Enabling intelligent logistics automation: home-grown Industrial IoT platform at Austrian Post](https://www.wearedevelopers.com/videos/2018-enabling-intelligent-logistics-automation-home-grown-industrial-iot-platform-at-austrian-post) - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [DevSecOps culture](https://www.wearedevelopers.com/videos/783-devsecops-culture) - [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large) - [Lessons learned from observing a billion API requests](https://www.wearedevelopers.com/videos/1574-lessons-learned-from-observing-a-billion-api-requests) ## Related Articles - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [7 Cloud Computing Trends Coming in 2025 for Developers](https://www.wearedevelopers.com/magazine/412-7-cloud-computing-trends-coming-in-2025-for-developers) - [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again) - [The Overflow: Security and Privacy](https://www.wearedevelopers.com/magazine/715-the-overflow-security-and-privacy)