Information Systems Security Officer (ISSO)

Information Systems Security Officer (ISSO)

Ashburn, VA 20147

Location: 100% On-Site

Security: DHS Suitability Public Trust

Multiple Openings!

Position Overview

Anakim Consulting is expanding our team supporting a large federal agency. Our Information Systems Security Officers (ISSO) manage security authorization activities and ensure continuous compliance for assigned enterprise and government information systems. This role is responsible for maintaining the security posture of systems throughout their lifecycle by managing security control implementation, developing authorization artifacts, and facilitating Risk Management Framework (RMF) processes in collaboration with System Owners, Security Assessors, and Authorizing Officials (AOs).

Key Responsibilities

• Authorization and Compliance: Manage security authorization activities, maintain Authority to Operate (ATO) packages, and ensure full compliance with federal, defense, or enterprise security standards (e.g., NIST SP 800-53, NIST SP 800-37, FISMA, RMF).
• Documentation Management: Develop, review, and maintain core system security documentation, including System Security Plans (SSPs), Security Assessment Reports (SARs), Security Control Traceability Matrices (SCTM), and Contingency Plans.
• Vulnerability and POA&M Management: Track, manage, and remediate security findings and Plan of Action and Milestones (POA&M) items. Evaluate control deficiencies and recommend risk-mitigating solutions.
• Assessment Coordination: Coordinate independent security assessments, third-party audits, and continuous monitoring activities. Collaborate with stakeholders to resolve non-compliant findings.
• Technical Guidance: Serve as a subject matter expert on security policy interpretation, control implementation, and system authorization strategies.

Requirements and Qualifications:

• U.S. citizenship, no dual citizenship
• Current DHS CBP Suitability or eligibility to obtain secure access approval for DHS CBP EOD
• Availability to work on-site in Ashburn
• Education: Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or related field. Equivalent years of related experience may be considered in lieu of a degree.
• Certifications:
  
  
  
  • Junior: CompTIA Security+, CAP/CISC, GIAC Security Essentials (GSEC)
  • Mid/Senior: CISSP, CISM, CAP/CISC, CISA
  
  
  
  

Position level varies by role and related experience:

Junior ISSO (1-3 years)

• Supports security authorization activities and routine documentation updates.
• Assists in tracking POA&M items and compiling security assessment evidence.
• Monitors security control compliance under supervision.

Mid-Level ISSO (4-6 years)

• Independently manages authorization packages for assigned information systems.
• Coordinates end-to-end security assessments with internal and external assessors.
• Analyzes security control deficiencies and drafts robust remediation plans.

Senior ISSO (7-10 years)

• Oversees authorization strategies for complex, high-impact, or interconnected systems.
• Advises System Owners and executive leadership on complex compliance issues.
• Mentors junior/mid ISSOs and drives continuous monitoring program enhancements.

#ISSO #InformationSecurity #RMF #NIST80053 #ATO #POAM #PublicTrust #DHS #AshburnVA #GovCon #CyberSecurityJobs #Hiring #NowHiring #TechJobs #ClearedJobs

This position is currently accepting applications.

Apply Now