Information Systems Security Officer (ISSO)

LVIS•Palo Alto, CA

1d•$130,000 - $150,000•Onsite

About The Position

LVIS Corporation is seeking an Information Systems Security Officer (ISSO) to help build and scale its security and compliance program as the company expands its cloud-based healthcare platform and pursues FedRAMP authorization. The role offers ownership of FedRAMP activities and collaboration with executive leadership, engineering, and product teams at a healthcare AI company developing an AI-powered EEG analysis platform. The ISSO will support FedRAMP authorization and continuous monitoring, maintain the system security plan and related security documentation, coordinate vulnerability management and audit preparation, and work with engineering and DevOps to implement and monitor security controls. The role also supports incident response, risk assessments, third-party security reviews, compliance evidence management, and tracking POA&M items and security metrics. This is a full-time, on-site position for U.S. citizens only. The expected base salary is $130,000–$150,000 annually, depending on experience, qualifications, certifications, and demonstrated cybersecurity expertise. LVIS offers comprehensive health, dental, and vision coverage.

Requirements

Bachelor's degree in Cybersecurity, Information Systems, Computer Science, Engineering, or a related field.
3 to 5+ years of cybersecurity, cloud security, compliance, GRC, or IT security experience.
CompTIA Security+ certification.
Strong technical writing and documentation skills.
Experience working directly with software engineering and cloud infrastructure teams.
U.S. citizenship.

Nice To Haves

AWS Security Specialty or SSCP certification.
Participation in at least one SOC 2, FedRAMP, GovRAMP, StateRAMP, or ISO 27001 audit or assessment.
Experience with AWS cloud environments and modern SaaS architectures.
Familiarity with NIST 800-53, FedRAMP, HIPAA, or healthcare technology environments.
Experience supporting regulated cloud platforms.

Responsibilities

Support FedRAMP authorization and continuous monitoring activities.
Own the development, maintenance, and updating of the FedRAMP system Security Plan (SSP) and associated security documentation.
Coordinate vulnerability management, remediation tracking, and audit preparation.
Partner with engineering and DevOps teams to implement and monitor security controls.
Support incident response, risk assessments, and third-party security reviews.
Collect and manage compliance evidence for audits, customer security reviews, and FedRAMP assessments.
Track POA&M items and security program metrics.