Information Systems Security Officer (Remote from US)

Jobgether

4d•Remote

About The Position

In this role, you will provide expert cybersecurity oversight and governance for mission-critical IT systems, ensuring compliance with federal frameworks and organizational policies. You will lead security risk management, continuous monitoring, and authorization processes while collaborating closely with system owners, engineering teams, auditors, and executive leadership. The position requires translating complex technical system details into actionable security requirements, overseeing vulnerability management, and guiding secure system design and modernization efforts. You will serve as a key security liaison, delivering insights and briefings to stakeholders and helping maintain a secure, compliant, and resilient IT environment. Strong analytical, communication, and federal cybersecurity expertise are essential.

Requirements

7+ years of experience as an ISSO or similar cybersecurity role supporting federal agencies
Direct experience with VA environments, ATO processes, eMASS, Archer, CSAM, and applicable federal policies
Strong understanding of NIST SP 800-53, RMF, FISMA, and federal cybersecurity governance
Experience managing POA&Ms, vulnerability remediation, and continuous monitoring activities
Ability to interpret technical system details and translate them into actionable security requirements
Excellent communication skills, including executive-level reporting
Ability to obtain and maintain a Public Trust clearance

Nice To Haves

Support experience with federal healthcare or enterprise IT programs (e.g., VA OIT, EHRM, VHA, VBA, ICAM)
Familiarity with cloud security platforms such as AWS, Azure, or VAEC
Security certifications such as CISSP, CAP, or Security+
Experience with Zero Trust architectures, identity modernization, or large-scale federal IT transformations

Responsibilities

Lead security compliance and governance activities aligned with federal standards such as NIST, FISMA, and organizational directives
Manage and maintain system security documentation, including SSPs, SARs, POA&Ms, and risk assessments
Oversee continuous monitoring, vulnerability remediation, and security control assessments to mitigate risks
Provide guidance on secure system design, configuration changes, and integration efforts
Support incident response activities, root cause analysis, and implementation of compensating controls
Act as a security liaison to program leadership, system owners, and cybersecurity offices, preparing briefings and dashboards
Collaborate with cross-functional teams to ensure security requirements are clearly understood and applied