Information System Security Officer (ISSO)

Gunnison Consulting Group•Washington, DC

2d•Onsite

About The Position

This position is contingent upon a future opening with Gunnison. The Information System Security Officer (ISSO) will conduct security control assessments and ensure compliance with federal requirements (NIST, FISMA). This role involves performing risk/vulnerability analyses, maintaining ATO-ready artifacts (SSPs, SAPs, SARs, POA&Ms), monitoring security events, and assisting with incident response mitigation.

Requirements

5+ years of experience in Cybersecurity Assessments / RMF.
Experience acting as an ISSO.
Hands-on experience with vulnerability scanning tools (e.g., Tenable Nessus).
Writing technical assessment reports (SARs) and POA&Ms.
Strong knowledge of the NIST RMF and evaluating system configurations.
CISSP (or Govt-accepted equivalents like CISM, CASP+, or GIAC series).
Bachelor’s degree in Computer Science, Cybersecurity, IT, or related field.
Public Trust or higher active clearance with the ability to obtain a Secret Clearance.

Nice To Haves

7+ years of work experience.
Experience acting as an ISSO for classified systems.
Familiarity with specific GRC tools (eMASS, CSAM).
NTIA or Commerce experience.
Experience developing automated compliance dashboards.
Federal audit response experience (OIG/GAO).
CISA, CRISC, or CEH.
Additional certifications or advanced degrees in IT, project management, or data management fields.
Active Secret Clearance.

Responsibilities

Conduct security control assessments and ensure compliance with federal requirements (NIST, FISMA).
Perform risk/vulnerability analyses.
Maintain ATO-ready artifacts (SSPs, SAPs, SARs, POA&Ms).
Monitor security events and assist with incident response mitigation.