Information System Security Officer, Lead

Booz Allen Hamilton•Washington, DC

10d•$99,000 - $225,000•Remote

About The Position

We are seeking an experienced Information Systems Security Officer (ISSO) to support the cybersecurity and compliance needs of a U.S. government agency. The ISSO Lead will be responsible for ensuring the security of agency information systems in compliance with the Federal Information Security Modernization Act (FISMA), National Institute of Standards and Technology (NIST) Special Publications (SP) 800 series, Risk Management Framework (RMF), and other federal security policies, and serving as the principal advisor to the Authorizing Official (AO), System Owner (SO), or CISO on all matters involving the system's security. You will work closely with system owners, security teams, and IT staff to maintain a strong security posture, implement security controls, and support authorization and risk management processes. You will ensure applicable cybersecurity policies and controls are implemented for the client’s existing and new systems and operational security posture consistent with current security policy is maintained. You will ensure timely completion and reporting of required continuous monitoring activities, including system security assessments and POA&M, or other identified system weakness monitoring and resolution.

Requirements

5+ years of experience with ISSO responsibilities within a federal agency or government contractor environment, including information security or cybersecurity
Experience supporting security authorization packages through each RMF step, including system categorization, control selection and implementation, security assessment, authorization, and continuous monitoring ensuring required documentation is complete, accurate, and compliant with NIST, FISMA, and agency-specific requirements
Experience supervising and directing ISSO personnel supporting a portfolio of federal information systems, establishing priorities, and ensuring consistent implementation of RMF processes, quality, and consistency of security documentation
Knowledge of NIST RMF, FISMA, NIST 800-53, RMF, and federal cybersecurity policies
Ability to interface with system administrators, auditors, executives, and cross-functional teams effectively
Ability to obtain and maintain a Public Trust or Suitability/Fitness determination based on client requirements
Bachelor’s degree

Nice To Haves

Experience working in a fast-paced team environment, promptly responding to client requests and needs
Knowledge of cloud security frameworks such as FedRAMP, Zero Trust architecture, and emerging cybersecurity threats
Possession of strong communication skills
CISSP, CISM, CISA, Security+, CAP, or CEH Certification

Responsibilities

Ensuring the security of agency information systems in compliance with FISMA, NIST SP 800 series, RMF, and other federal security policies.
Serving as the principal advisor to the Authorizing Official (AO), System Owner (SO), or CISO on all matters involving the system's security.
Working closely with system owners, security teams, and IT staff to maintain a strong security posture, implement security controls, and support authorization and risk management processes.
Ensuring applicable cybersecurity policies and controls are implemented for the client’s existing and new systems.
Maintaining operational security posture consistent with current security policy.
Ensuring timely completion and reporting of required continuous monitoring activities, including system security assessments and POA&M, or other identified system weakness monitoring and resolution.
Supervising and directing ISSO personnel supporting a portfolio of federal information systems.
Establishing priorities for ISSO personnel.
Ensuring consistent implementation of RMF processes, quality, and consistency of security documentation.