Information Systems Security Officer - Washington DC

Military Spouse Corporate Career Network • Washington, DC

3d • Onsite

About The Position

Quantum Sky is searching for an Information Systems Security Officer (ISSO), Mid to support a federal customer in Washington, DC. We are looking for a highly organized, proactive, and customer-focused cybersecurity professional who excels at building trusted relationships, communicating with both technical and executive stakeholders, and independently driving complex initiatives to successful completion. The ideal candidate thrives in a fast-paced environment, embraces ownership and accountability, and consistently delivers high-quality work while balancing customer needs with federal security and privacy requirements. In this role, you will serve as a trusted advisor to government customers while leading information security, privacy, and Governance, Risk, and Compliance (GRC) activities to ensure federal systems remain secure, compliant, and mission-ready.

Requirements

• Mid-level Information Systems Security Officer (ISSO) experience
• Highly organized, proactive, and customer-focused cybersecurity professional
• Ability to build trusted relationships
• Excellent communication skills with both technical and executive stakeholders
• Ability to independently drive complex initiatives to successful completion
• Thrives in a fast-paced environment
• Embraces ownership and accountability
• Consistently delivers high-quality work
• Balances customer needs with federal security and privacy requirements
• Experience serving as a trusted advisor to government customers
• Experience leading information security, privacy, and Governance, Risk, and Compliance (GRC) activities
• Experience with Risk Management Framework (RMF) lifecycle
• Experience with Authorization to Operate (ATO)
• Experience with continuous monitoring
• Experience integrating security, privacy, and legal requirements
• Experience developing, maintaining, and presenting security authorization packages and supporting documentation
• Familiarity with NIST SP 800-53
• Experience with SSPPs, RARs, SAPs, SARs, POA&Ms, contingency and incident response plans, SOPs, configuration management plans, STIG deviations, and related artifacts
• Experience owning security and privacy initiatives from planning through completion
• Experience proactively managing tasks, driving remediation efforts, validating corrective actions, and ensuring deliverables are completed accurately and on schedule
• Experience performing security and privacy risk assessments
• Experience analyzing vulnerability scan results
• Experience recommending risk-based solutions
• Experience supporting continuous monitoring activities across applications, infrastructure, and databases
• Experience serving as a trusted cybersecurity advisor to Contracting Officer Representatives (CORs), system owners, business stakeholders, and technical teams
• Experience communicating complex security and privacy requirements clearly, professionally, and with a customer-focused approach
• Experience developing, coordinating, testing, and maintaining contingency planning, incident response, privacy, and continuity activities
• Experience with PTAs, PIAs, HVA support, privacy training, and privacy-by-design integration throughout the System Development Life Cycle (SDLC)
• Experience developing and maintaining privacy policies, directives, SOPs, and operational guidance
• Experience ensuring compliance with applicable federal privacy laws, OMB guidance, NIST publications, CJIS Security Policy, and Legislative Branch requirements
• Ability to build strong cross-functional relationships
• Ability to manage multiple concurrent priorities in a fast-paced environment
• Ability to identify process improvements
• Exceptional attention to detail across all security and compliance activities
• Experience coordinating with internal and external stakeholders to support audits, agency data calls, reporting requirements, asset inventories, and other compliance initiatives.

Responsibilities

• Lead and support information system security responsibilities throughout the Risk Management Framework (RMF) lifecycle, including Authorization to Operate (ATO), continuous monitoring, and integration of security, privacy, and legal requirements.
• Develop, maintain, and present security authorization packages and supporting documentation in accordance with client requirements and NIST SP 800-53, including SSPPs, RARs, SAPs, SARs, POA&Ms, contingency and incident response plans, SOPs, configuration management plans, STIG deviations, and related artifacts.
• Own security and privacy initiatives from planning through completion by proactively managing tasks, driving remediation efforts, validating corrective actions, and ensuring deliverables are completed accurately and on schedule.
• Perform security and privacy risk assessments, analyze vulnerability scan results, recommend risk-based solutions, and support continuous monitoring activities across applications, infrastructure, and databases.
• Serve as a trusted cybersecurity advisor to Contracting Officer Representatives (CORs), system owners, business stakeholders, and technical teams by communicating complex security and privacy requirements clearly, professionally, and with a customer-focused approach.
• Develop, coordinate, test, and maintain contingency planning, incident response, privacy, and continuity activities, including PTAs, PIAs, HVA support, privacy training, and privacy-by-design integration throughout the System Development Life Cycle (SDLC).
• Develop and maintain privacy policies, directives, SOPs, and operational guidance while ensuring compliance with applicable federal privacy laws, OMB guidance, NIST publications, CJIS Security Policy, and Legislative Branch requirements.
• Build strong cross-functional relationships while managing multiple concurrent priorities in a fast-paced environment, identifying process improvements, and maintaining exceptional attention to detail across all security and compliance activities.
• Coordinate with internal and external stakeholders to support audits, agency data calls, reporting requirements, asset inventories, and other compliance initiatives.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: No Education Listed