> Markdown version of [/jobs/ext/4599194-information-system-security-officer-isso](https://www.wearedevelopers.com/jobs/ext/4599194-information-system-security-officer-isso). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Information System Security Officer (ISSO)

- **Company:** The Job Network
- **Location:** Washington, DC, United States
- **Experience:** Experienced
- **Contract:** Permanent contract
- **Skills:** Xacta, Amazon Web Services, Cloud Computing, Cloud Computing Security, Cyber Security, Information Systems, Data as a Services, Data Infrastructure, Identity and Access Management, Information Security Management, Internet Security, Network Planning and Design, Software Vulnerability Management, Enterprise Data Management, Okta, Cyberark, HybridCloud, Information Technology, Nessus, RSA Archer Platform, Devsecops, Qualys, Plan of Action and Milestones
- **Published:** November 6, 2026
- **Apply:** https://www.careerbuilder.com/job-details/information-system-security-officer-isso--70b93fd7-bb00-48bb-8575-7526110b2770

## About the Role

Computer Security, Network Design, Information Technology & Information Systems, Federal Contracts, Government, Technical Delivery, Risk Management, Internet Security, Computer Security, Cloud Computing, * U.S. Citizenship is required

 * Must be able to obtain and maintain a Public Trust clearance
 * This position is remote, candidate must reside in one of the following states: AL, AZ, DC, FL, GA, ID, MD, MS, NJ, NC, OK, OH, PA, SC, TN, TX, UT, VA, WV
 * Occasional travel may be required. Candidates should be able to attend meetings at FAA facilities and other locations throughout the Continental United States (CONUS) as required.
 * Must be available during Eastern Time (ET) business hours to support program needs and FAA coordination., * Bachelor's degree in Cybersecurity, Information Systems, Computer Science, Information Technology, or a related field is preferred. Equivalent relevant education, training.
 * Minimum of 4 years of experience in cybersecurity, information assurance, RMF, system authorization, vulnerability management, or related federal security work.
 * Demonstrated experience supporting RMF and ATO/A&A activities.
 * Working knowledge of NIST SP 800-53 and federal cybersecurity requirements.
 * Hands-on experience managing and remediating POA&Ms.
 * Experience analyzing vulnerability or security findings and coordinating corrective actions.
 * Experience developing and maintaining security authorization documentation and evidence.
 * Understanding of continuous monitoring, risk management, cloud security, and security control assessment.
 * Strong technical writing, communication, and organizational skills.
 * Ability to obtain and maintain required federal suitability.

Preferred Qualification & Skills:

 * Experience supporting FAA, DOT, or another federal civilian agency.
 * Experience with FISMA High or other high-impact systems.
 * Experience with AWS/AWS GovCloud or hybrid cloud environments.
 * Experience with Tenable/Nessus, Qualys, CSAM, Xacta, Archer, or similar security/GRC platforms.
 * Familiarity with Okta, CyberArk, FedRAMP, DevSecOps, or continuous ATO (cATO).
 * Relevant certification such as Security+, CGRC, CISSP, CISM, or CCSP.

Preferred Technical Skills:

 * Experience with AWS/AWS GovCloud or hybrid cloud environments.
 * Experience with Tenable/Nessus, Qualys, CSAM, Xacta, Archer, or similar security/GRC platforms.
 * Familiarity with Okta, CyberArk, FedRAMP, DevSecOps, or continuous ATO (cATO).

## Description

NDi is seeking an experienced Information System Security Officer (ISSO) to support cybersecurity, risk management, and system authorization activities within a large federal enterprise data and cloud environment.

This is a hands-on role supporting RMF/ATO, NIST security controls, vulnerability management, POA&M remediation, and continuous monitoring. The ISSO will work directly with system owners, engineers, architects, and cybersecurity stakeholders to identify security risks, develop practical remediation strategies, maintain authorization evidence, and drive security findings through closure.

The environment includes cloud-based enterprise data platforms supporting applications, analytics, data services, and emerging technologies., * Support systems throughout the NIST RMF and ATO lifecycle, including ongoing authorization and continuous monitoring.

 * Implement, assess, and document NIST SP 800-53 security controls.
 * Develop and maintain security authorization documentation, including SSPs, risk assessments, POA&Ms, control documentation, and assessment evidence.
 * Review vulnerability scans and security findings, assess risk, and develop actionable remediation plans.
 * Create and manage POA&Ms from identification through validated closure, coordinating remediation with system owners and engineering teams.
 * Maintain current, traceable, audit-ready evidence supporting security controls and authorization.
 * Evaluate system and configuration changes for security, control, and authorization impacts.
 * Support security activities across AWS/cloud, application, infrastructure, and data environments.
 * Support IAM/PAM, privacy, incident response, and security assessment activities as required.
 * Communicate risks, remediation status, and security recommendations to technical and program stakeholders.