Information System Security Officer, Lead

Booz Allen Hamilton•McLean, DC

6d•Onsite

About The Position

The Information System Security Officer (ISSO) Lead will be responsible for ensuring the security of agency information systems in compliance with the Federal Information Security Modernization Act (FISMA), National Institute of Standards and Technology (NIST) Special Publications (SP) 800 series, Risk Management Framework (RMF), and other federal security policies. This role serves as the principal advisor to the Authorizing Official (AO), System Owner (SO), or CISO on all matters involving the system's security. The ISSO Lead will work closely with system owners, security teams, and IT staff to maintain a strong security posture, implement security controls, and support authorization and risk management processes. They will ensure applicable cybersecurity policies and controls are implemented for the client’s existing and new systems and maintain an operational security posture consistent with current security policy. Additionally, the ISSO Lead will ensure timely completion and reporting of required continuous monitoring activities, including system security assessments and POA&M, or other identified system weakness monitoring and resolution.

Requirements

5+ years of experience with ISSO responsibilities within a federal agency or government contract or environment, including information security or cybersecurity.
Experience supporting security authorization packages through each RMF step, including system categorization, control selection and implementation, security assessment, authorization, and continuous monitoring ensuring required documentation is complete, accurate, and compliant with NIST, FISMA, and agency-specific requirements.
Experience supervising and directing ISSO personnel supporting a portfolio of federal information systems, establishing priorities, and ensuring consistent implementation of RMF processes, quality, and consistency of security documentation.
Knowledge of NIST RMF, FISMA, NIST 800-53, RMF, and federal cybersecurity policies.
Ability to interface with system administrators, auditors, executives, and cross-functional teams effectively.
Ability to obtain and maintain a Public Trust or Suitability/Fitness determination based on client requirements.
Bachelor’s degree.

Nice To Haves

Experience working in a fast-paced team environment, promptly responding to client requests and needs.
Knowledge of cloud security frameworks such as FedRAMP, Zero Trust architecture, and emerging cybersecurity threats.
Possession of strong communication skills.
CISSP, CISM, CISA, Security+, CAP, or CEH Certification.

Responsibilities

Ensuring the security of agency information systems in compliance with FISMA, NIST SP 800 series, RMF, and other federal security policies.
Serving as the principal advisor to the AO, SO, or CISO on all matters involving the system's security.
Working closely with system owners, security teams, and IT staff to maintain a strong security posture.
Implementing security controls.
Supporting authorization and risk management processes.
Ensuring applicable cybersecurity policies and controls are implemented for the client’s existing and new systems.
Maintaining an operational security posture consistent with current security policy.
Ensuring timely completion and reporting of required continuous monitoring activities, including system security assessments and POA&M, or other identified system weakness monitoring and resolution.
Supervising and directing ISSO personnel supporting a portfolio of federal information systems.
Establishing priorities for ISSO personnel.
Ensuring consistent implementation of RMF processes, quality, and consistency of security documentation.