> Markdown version of [/jobs/ext/4601129-principal-information-system-security-officer](https://www.wearedevelopers.com/jobs/ext/4601129-principal-information-system-security-officer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Principal Information System Security Officer

- **Company:** Cornerstone Barricades
- **Location:** Washington, DC, United States
- **Experience:** Expert
- **Salary:** $79,040 - $83,200
- **Contract:** Temporary contract
- **Skills:** Application Programming Interfaces (APIs), Amazon Web Services, Microsoft Azure, Cyber Security, Information Security Management, Information Systems Security Architecture Professional, Scrum Methodology, Systems Development Life Cycle, Secure Coding, Technical Debt, CIS Benchmarks, Devsecops
- **Published:** November 6, 2026
- **Apply:** https://zipstaff.betterteam.com/principal-information-system-security-officer-(isso)/apply/standard

## About the Role

* 10+ years of cybersecurity experience, including 5+ years as an ISSO, in Information Assurance or Security Architecture in enterprise or government-adjacent environments.
 * Experience embedding security governance in Agile/Scrum/SAFe and modern CI/CD pipelines.
 * Deep knowledge of NIST SP 800-series (800-37 RMF, 800-53, 800-160), FISMA, FedRAMP, ISO 27001 and CIS Benchmarks.
 * Experience evaluating cloud (AWS, Azure or GCP), containerized platforms, APIs and hybrid infrastructure for risk.
 * Ability to translate security requirements into actionable technical guidance and communicate risk to leadership.
 * Active CISSP, CISM, CRISC, CCSP or CISA certification.
 * Based in the greater Washington, DC area; able to obtain or maintain a public trust or clearance as required.

## Description

ZipStaff is hiring a Principal Information System Security Officer (ISSO) for our client, a major U.S. passenger rail transportation organization based in Washington, DC. You will serve as an embedded cybersecurity subject matter expert and risk advisor, championing secure-by-design principles across enterprise Agile Release Trains and ensuring security controls and compliance are built into architecture and delivery from the start.
What You'll Do:

 * Provide cybersecurity design oversight, threat modeling and risk governance across Agile Release Trains and delivery pipelines.
 * Embed security architectures and baseline controls early in the SDLC to reduce technical debt and deployment risk.
 * Act as the primary cybersecurity liaison between product managers, enterprise architects, engineering teams and senior stakeholders.
 * Author and evaluate SSPs, RARs, SAPs and POA&Ms.
 * Ensure compliance with NIST SP 800-37, 800-53, FISMA, FedRAMP and internal governance directives.
 * Partner with engineering leads to operationalize DevSecOps, automate continuous monitoring and enforce secure coding and configuration standards.
 * Facilitate risk-based trade-off decisions, review architecture deviations and lead remediation of complex vulnerabilities.