Information Systems Security Officer (ISSO) – Senior/SME Level
About The Position
Tangent Technologies is seeking a senior/SME-level Information Systems Security Officer to support a federal program. The ISSO ensures the ongoing security, compliance, and risk management of information systems and develops and implements the security documentation and procedures needed to obtain and maintain an Authority to Operate (ATO). The ISSO serves as a security advisor, supporting compliance with federal standards and frameworks including NIST, FISMA, FedRAMP, and the Risk Management Framework (RMF), and implementing continuous monitoring practices for assigned systems. The role is hybrid, with some onsite work required. Candidates should be proactive, detail-oriented, and have strong communication skills for client engagement.
Requirements
- Bachelor’s degree in Computer Science, Information Systems, or a related cybersecurity field, or six years of work-experience equivalency in addition to the experience listed.
- At least 15 years of experience in ISSO, information assurance, or RMF roles.
- Direct experience developing ATO packages, including SSPs, POA&Ms, and SARs.
- Strong knowledge of NIST SP 800-53, FISMA, and RMF requirements.
- Demonstrated ability to manage 4–6 systems simultaneously.
- Active DoD clearance required.
- Must successfully complete a federal background investigation, including a financial suitability screening.
- One relevant certification is required: CISSP, CISM, CISA, CRISC, or CGRC.
Nice To Haves
- Experience with cloud-based systems (SaaS, IaaS, or PaaS) from providers such as AWS, Azure, or GCP.
- Experience using Microsoft and Google Suite tools.
- Familiarity with AI tools such as Gemini or ChatGPT.
- Familiarity with Archer or CSAM platforms.
- Experience supporting federal civilian agencies.
- Active Public Trust clearance.
- Veterans and military-affiliated individuals are strongly encouraged to apply.
Responsibilities
- Lead the development, review, and maintenance of System Security Plans (SSPs) and authorization packages.
- Prepare ATO packages, including SSPs, Plans of Action & Milestones (POA&Ms), Security Assessment Reports (SARs), and supporting documentation.
- Guide systems through the ATO lifecycle and continuous authorization processes, ensuring compliance with NIST SP 800-53, FISMA, and RMF standards.
- Conduct Security Impact Analyses (SIAs) for system changes, develop vulnerability mitigation strategies, and collaborate with system engineers to maintain secure system baselines.
- Conduct regular security audits, oversee scanning operations such as ACAS and Nessus, and manage POA&Ms for remediation.
- Perform self-assessments and risk assessments, and conduct annual testing of Contingency Plans and Incident Response Plans.
- Ensure systems comply with applicable federal, DoD, or Intelligence Community security frameworks.
- Review audit logs, analyze vulnerability scans, and evaluate system-level reports to assess security control effectiveness.
- Implement security telemetry, manage patch statuses, and monitor system activity for anomalous behavior or potential threats.
- Provide risk and compliance advice to system owners and Information System Security Managers (ISSMs), and mentor junior ISSO staff.
- Apply technical knowledge of network security, cloud environments, operating systems, and security assessment tools.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
