> Markdown version of [/jobs/ext/3475841-information-security-systems-officer-isso](https://www.wearedevelopers.com/jobs/ext/3475841-information-security-systems-officer-isso). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Information Security Systems Officer (ISSO)

- **Company:** Guidehouse Inc.
- **Location:** Washington, DC, United States
- **Experience:** Experienced
- **Salary:** $74,000.0 - $124,000.0
- **Contract:** Permanent contract
- **Skills:** Cloud Computing Security, Configuration Management, Cyber Security, Federal Information Processing Standards (FIPS), Software Vulnerability Management, Information Technology, Vulnerability Analysis
- **Published:** September 21, 2026
- **Apply:** https://www.indeed.com/viewjob?jk=9a8816074ba194e2

## About the Role

* Bachelor's degree in computer science, information technology, or cybersecurity.
 * Current Security+ certificate.
 * Minimum (3) three years of experience in cybersecurity.
 * Experience utilizing enterprise cybersecurity risk management and governance tools.
 * Experience with cloud security.
 * Must be able to obtain and maintain a Federal or DoD Public Trust. Candidates must receive approved adjudication of their Public Trust prior to onboarding with Guidehouse. Candidates with an active Public Trust or existing suitability are preferred.
 * Working knowledge or familiarity with, Working knowledge or experience with NIST IR 8467 Genomic Data Cybersecurity and Privacy Frameworks Community Profile

## Description

* Support the implementation and ongoing execution of the NIST RMF requirements across assigned authorization boundaries.
 * Assist in system categorization in accordance with FIPS 199 and NIST SP 800-60 guidance.
 * Help identify, document, and maintain applicable NIST SP 800-53 r5 security and privacy control implementations, control tailoring and inheritance.
 * Develop, review, and/or maintain RMF or security related documentation, including:
 + FIPS 199
 + System Security Plans (SSPs)
 + Plans of Action and Milestones (POA&Ms)
 + Privacy and risk assessments
 + Continuous monitoring documentation
 + System specific security control or organizational level standard operating procedures
 + Memorandums of Agreement/Understanding or Interconnection Security Agreements
 * Support security control assessments, remediation efforts, and authorization activities.
 * Identify security weaknesses, vulnerabilities, and compliance gaps; document findings and work with stakeholders to develop corrective actions.
 * Manage and maintain POA&Ms resulting from continuous monitoring or assessment results to ensure weaknesses are tracked through to remediation and closure.
 * Support the preparation of boundaries for Authorization to Operate (ATO), reauthorization, and ongoing authorization activities.
 * Monitor systems for compliance with FISMA and organizational cybersecurity policies, standards, and procedures.
 * Ensure security requirements are integrated into system design, development, implementation, and operational changes.
 * Support continuous monitoring activities, including control status reviews, vulnerability management, configuration management, and periodic assessments.
 * Coordinate vulnerability scanning, review scan results, and track remediation of identified findings.
 * Assist in incident response coordination, reporting, investigation, and follow-up corrective actions.
 * Promote security best practices and help ensure systems maintain an acceptable level of risk.
 * Manage boundary records in the applicable governance, risk, and compliance tool.