Information Systems Security Officer

Job Title:
Information System Security Office

Duration: 12 Months

• Support the Risk Management Framework (RMF) processes and system authorization lifecycle
• Experience with GRC platforms (Service Now GRC)
• Create systems baseline using NIST 800-53 security controls.
• Develop, review, and maintain security documentation (SSPs, POA&Ms, Policies and procedures, etc.)
• Perform security control assessments and validation activities
• Ensure compliance with NIST, ISO 27001, PCI, TSA and applicable regulatory frameworks
• Conduct vulnerability assessments and track remediation efforts through risk registry.
• Work with system owners to identify, document, and mitigate risks
• Monitor systems for compliance with security baselines and policies
• Support audit readiness and respond to audit findings
• Coordinate incident response activities and ensure proper reporting
• Provide security guidance and awareness to stakeholders
• Prepare and deliver regular status and risk reports
• Collaborate with cross-functional teams to strengthen security posture

• Proven experience as an Information System Security Officer (ISSO) or similar cybersecurity role
• Strong knowledge of NIST RMF (CSF, 800-53) and related standards
• Experience with security compliance frameworks NIST CSF 2.0, NIST 800-53 and NIST SP 800-161
• Familiarity with vulnerability management tools and security assessment methodologies
• Knowledge of cloud security (Azure, AWS, or GCP) is a plus
• Strong understanding of network, application, and data security principles
• Relevant certifications preferred (e.g., CISSP, CISM, CISA, Security+)
• Excellent analytical, documentation, and communication skills
• Ability to work effectively with both technical and non-technical stakeholders

• Free Healthcare Insurance
• Vision and Dental Insurance
• 401(k) Retirement Plan
• Free Life Insurance
• Sick Time Off