Information System Security Officer (ISSO)

Gunnison Consulting Group•Washington, DC

3d•$120,000 - $130,000•Onsite

About The Position

This position is contingent upon a future opening with Gunnison. The Information System Security Officer (ISSO) will be responsible for conducting security control assessments and ensuring compliance with federal requirements such as NIST and FISMA. This role involves performing risk and vulnerability analyses, maintaining Authority to Operate (ATO)-ready artifacts including System Security Plans (SSPs), Security Assessment Plans (SAPs), Security Assessment Reports (SARs), and Plans of Action and Milestones (POA&Ms). The ISSO will also monitor security events and assist with incident response mitigation.

Requirements

5+ years of experience in Cybersecurity Assessments / RMF.
Experience acting as an ISSO.
Hands-on experience with vulnerability scanning tools (e.g., Tenable Nessus).
Writing technical assessment reports (SARs) and POA&Ms.
Strong knowledge of the NIST RMF and evaluating system configurations.
CISSP (or Govt-accepted equivalents like CISM, CASP+, or GIAC series).
Bachelor’s degree in Computer Science, Cybersecurity, IT, or related field.
Public Trust or higher active clearance with the ability to obtain a Secret Clearance.

Nice To Haves

7+ years of work experience.
Experience acting as an ISSO for classified systems.
Familiarity with specific GRC tools (eMASS, CSAM).
NTIA or Commerce experience.
Experience developing automated compliance dashboards.
Federal audit response experience (OIG/GAO).
CISA, CRISC, or CEH
Additional certifications or advanced degrees in IT, project management, or data management fields
Active Secret Clearance

Responsibilities

Conduct security control assessments and ensure compliance with federal requirements (NIST, FISMA).
Perform risk/vulnerability analyses.
Maintain ATO-ready artifacts (SSPs, SAPs, SARs, POA&Ms).
Monitor security events and assist with incident response mitigation.