Senior Information Systems Security Officer (ISSO)

Arc Aspicio•Washington, DC

2d•$115,000 - $135,000•Hybrid

About The Position

The Senior Information Systems Security Officer (ISSO) supports complex Federal technology programs and oversees, manages, tracks, and reports on Government program-level information security to protect systems, facilities, and infrastructure. They have at least 5 years of ISSO experience on complex mission-critical programs and the ability to closely collaborate with Government leaders, facility managers, software development teams, and Government security offices. Arc Aspicio is currently working in a hybrid work environment where work will be performed at client sites, the Arc Aspicio DC office, and remotely. All candidates must live in the Washington, DC area at the time of employment.

Requirements

At least 5 years of direct ISSO experience in overseeing and interacting within a portfolio of security assets and systems at a Government-program level that involves multiple systems and facilities
Direct experience with senior clients and stakeholder engagement and delivering work products for clients in a complex environment
Proven to be flexible and thrive in a dynamic, ambiguous, and complex work environment and manage multiple tasks and projects simultaneously
Outstanding written and oral communication and collaboration skills and strong leadership potential
Ability to collaborate and work effectively remotely and in-person
Technologically savvy, especially with Microsoft products and use of collaboration tools like SharePoint
Desire to join a consulting firm and learn business concepts; loves to collaborate and reach out to get involved in company events, offerings, and special projects
Ability to work in the Washington, DC metro area and travel to different locations
Clearance: US Citizenship only (no dual citizenship)
Bachelor’s degree
Executive presence, entrepreneurial spirit, strong work ethic, collaborative mind-set, excellent problem-solving skills, and interest in working in a consulting firm.
Interest in working on assignments outside of one project is strongly desired

Nice To Haves

CISSP certification
Experience working with CISA, CISOs, ISSMs, and senior leadership

Responsibilities

Serve as the primary security point of contact for assigned federal information systems
Develop, implement, and maintain System Security Plans (SSPs) in accordance with NIST SP 800‑53, RMF, and agency‑specific requirements
Ensure continuous compliance with FISMA, FedRAMP, and organizational security policies
Support system Authorization to Operate (ATO) activities, including initial authorizations, renewals, and continuous monitoring
Conduct security control assessments and analyze system risks to confidentiality, integrity, and availability
Identify security vulnerabilities and manage remediation efforts through Plans of Action and Milestones (POA&Ms)
Collaborate with system owners and engineers to implement risk‑based security controls
Provide security guidance during system development, modernization, and operational phases
Execute and maintain continuous monitoring programs, including vulnerability scanning, log review, and control validation
Review and analyze scan results (e.g., Nessus, Tenable) and track remediation progress
Monitor compliance artifacts and evidence to support audits, inspections, and assessments
Support cybersecurity incident response activities, including investigation, documentation, and reporting
Ensure timely reporting of incidents in accordance with federal and agency procedures
Work with ISSMs, program managers, and federal customers
Collaborate with our clients to solve tough problems, delivering outstanding client service, and achieving mission results
Apply excellent consulting, business analysis, and communications skills to quickly identify problems, analyze challenges, and recommend solutions to our team and our clients