Information Systems Security Officer (ISSO)

Anakim Consulting is expanding our team supporting a large federal agency. Our Information Systems Security Officers (ISSO) manage security authorization activities and ensure continuous compliance for assigned enterprise and government information systems. This role is responsible for maintaining the security posture of systems throughout their lifecycle by managing security control implementation, developing authorization artifacts, and facilitating Risk Management Framework (RMF) processes in collaboration with System Owners, Security Assessors, and Authorizing Officials (AOs)., * Authorization and Compliance: Manage security authorization activities, maintain Authority to Operate (ATO) packages, and ensure full compliance with federal, defense, or enterprise security standards (e.g., NIST SP 800-53, NIST SP 800-37, FISMA, RMF).

• Documentation Management: Develop, review, and maintain core system security documentation, including System Security Plans (SSPs), Security Assessment Reports (SARs), Security Control Traceability Matrices (SCTM), and Contingency Plans.
• Vulnerability and POA&M Management: Track, manage, and remediate security findings and Plan of Action and Milestones (POA&M) items. Evaluate control deficiencies and recommend risk-mitigating solutions.
• Assessment Coordination: Coordinate independent security assessments, third-party audits, and continuous monitoring activities. Collaborate with stakeholders to resolve non-compliant findings.
• Technical Guidance: Serve as a subject matter expert on security policy interpretation, control implementation, and system authorization strategies., * Supports security authorization activities and routine documentation updates.
• Assists in tracking POA&M items and compiling security assessment evidence.
• Monitors security control compliance under supervision.

Mid-Level ISSO (4-6 years)

• Independently manages authorization packages for assigned information systems.
• Coordinates end-to-end security assessments with internal and external assessors.
• Analyzes security control deficiencies and drafts robust remediation plans.

Senior ISSO (7-10 years)

• Oversees authorization strategies for complex, high-impact, or interconnected systems.
• Advises System Owners and executive leadership on complex compliance issues.
• Mentors junior/mid ISSOs and drives continuous monitoring program enhancements.

Requirements and Qualifications:

• U.S. citizenship, no dual citizenship
• Current DHS CBP Suitability or eligibility to obtain secure access approval for DHS CBP EOD
• Availability to work on-site in Ashburn
• Education: Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or related field. Equivalent years of related experience may be considered in lieu of a degree.
• Certifications:
• Junior: CompTIA Security+, CAP/CISC, GIAC Security Essentials (GSEC)
• Mid/Senior: CISSP, CISM, CAP/CISC, CISA

Position level varies by role and related experience

This position offers a full-time W2 salary plus eligibility to participate in the company’s benefits program.