Information Systems Security Officer (ISSO)

Motorola Solutions•Washington, DC

1d•$120,000 - $140,000•Remote

About The Position

At Motorola Solutions, we believe that everything starts with our people. We’re a global close-knit community, united by the relentless pursuit to help keep people safer everywhere. We build and connect technologies to help protect people, property and places. Our solutions foster the collaboration that’s critical for safer communities, safer schools, safer hospitals, safer businesses, and ultimately, safer nations. Connect with a career that matters, and help us build a safer future. As Motorola's premier cybersecurity consulting group, the cyber professional services team provides in-depth technical, compliance, and governance assessments as well as strategic recommendations for our customer’s and their networks, operational technology and installed Motorola products and platforms. The cyber professional services team provides a full spectrum of cybersecurity services ranging from physical security, vulnerability management, penetration testing, risk management and compliance with frameworks and benchmarks such as CJIS, CIS, ISO, and NIST. We are seeking a skilled and compliance-driven Information System Security Officer (ISSO) Specialist to join our CMS Security and Privacy Support Services Contract. This role will be crucial in supporting the security authorization, risk management, and ongoing compliance of CMS systems, adhering to the Risk Management Framework (RMF), FISMA, and CMS Acceptable Risk Safeguards (ARS). This role will also be supporting the review of various security and privacy artifacts to ensure appropriate risk management and ongoing compliance of CMS partner systems adhering to the Minimum Acceptable Risk Standards for Exchanges (MARS-E) and Acceptable Risk Controls for Affordable Care Act (ACA), Medicaid, and Partner Entities (ARC-AMPE) standards in preparation for connection to CMS federal systems. The ISSO Specialist will achieve this through meticulous documentation, thorough risk assessments, and effective collaboration with system owners, stakeholders, and cybersecurity teams.

Requirements

Bachelor’s degree in Cybersecurity, Information Systems, or a related field.
8+ years of experience supporting RMF, ISSO, or compliance-related activities in a federal IT environment.
Working-level knowledge of FISMA, NIST/DoD/HHS/CMS RMF policies, and NIST SP 800-series publications.
Experience preparing and maintaining ATO documentation and supporting audits or security reviews.
Excellent technical writing, communication, and collaboration skills.
Detail-oriented with a strong understanding of security control implementation and tracking.
Must be able to obtain a background clearance as required by our government customers
Legal authorization to work in the U.S. indefinitely is required.
Employer work permit sponsorship is not available for this position.

Nice To Haves

Experience supporting CMS, HHS, or ACA-related programs.
Familiarity with CFACTS, RSA Archer, Confluence, Tableau, SharePoint, Slack and Cloudtamer.
Certifications such as CAP, CISSP, Security+, CISA, or CISM.
Knowledge of cloud security compliance (FedRAMP, AWS, Azure).
Understanding of Zero Trust Architecture and continuous monitoring strategies.

Responsibilities

Support system security authorization and reauthorization efforts for ACA federal systems in compliance with NIST RMF and CMS ARS.
Support Authority to Operate (ATC) efforts for CMS State partner systems in compliance with MARS-E and/or ARC-AMPE.
Maintain, update, and/or review required security documentation (SSP, SAR, POA&M, Contingency Plan, ISA, etc.).
Coordinate with CMS stakeholders, system owners, and cybersecurity SMEs to ensure compliance with FISMA, FedRAMP, and CMS policies.
Monitor and report on the status of POA&M items, risk mitigations, and control implementations.
Participate in control assessments, audits, and continuous monitoring activities.
Support security incident documentation, data calls, and ATO package submissions.
Provide security input and support for changes to the system environment, architecture, or operational posture.
Ensure traceability between security controls, findings, and remediation efforts.