Information Systems Security Officer (ISSO) - Senior

Avint

9d•$110,000 - $125,000

About The Position

We are seeking a highly skilled and experienced Information Systems Security Officer (ISSO) - Senior to join our team. In this critical role, you will be responsible for executing the full RMF lifecycle across all information systems and applications, leading security assessment activities with the goal of maintaining a 100% Authority to Operate (ATO) status. As a senior leader, you will ensure the rigorous application of cybersecurity policies, manage system remediation efforts, design critical contingency plans, and champion cybersecurity awareness across the organization.

Requirements

Bachelor’s Degree (BA/BS) OR equivalent verifiable work experience
Six (6) years of progressive experience in information assurance, cybersecurity engineering, or ISSO/ISSM roles.
Must be a U.S. citizen (no dual citizenship).
Ability to pass a background investigation.
Able to obtain and maintain DHS Suitability/Entry on Duty (EOD).
High level of attention to detail and strong organizational skills.
Strong leadership and project management capabilities to drive remediation actions and manage inspection timelines.
Excellent communication and presentation skills, with a proven ability to draft technical status reports and confidently brief clients and senior stakeholders.
Deep subject matter expertise and advanced knowledge of RMF and NIST security controls.
Proven track record of leading systems successfully through the assessment and authorization process to secure and maintain a 100% ATO status.
Demonstrated experience authoring enterprise-level documentation, including Contingency Plans and Disaster Recovery Plans.
Experience coordinating and leading responses to formal cybersecurity audits, technical inspections, and orders processing.

Responsibilities

Ensure the rigorous application of cybersecurity policies, principles, and practices in the delivery of all IT cybersecurity services.
Develop and implement programs as required to ensure that systems, networks, and data users are aware of, understand, and adhere to systems cybersecurity policies and procedures.
Develop system security contingency plans and disaster recovery plans to ensure organizational resilience.
Help conduct the appropriate remediation actions associated with findings from inspections and evaluations, generate status reports, and brief clients on the security health of information systems or programs.
Provide subject matter expertise and knowledge of RMF to perform Risk Management Framework activities for all information systems and applications.
Follow RMF to identify, implement, assess, and manage cybersecurity capabilities and services, expressed as security controls, and authorizing the operation of an information system.
Lead the security assessment and authorization activities for information systems, maintaining 100% ATO status.
Lead cybersecurity-related audits, inspections, assessments, operations, and orders processing.
Ensure information systems comply with client requirements and industry standards.