Senior Information Systems Security Officer; ISSO

Lead Information Systems Security Officer (ISSO)

Arlington, Virginia, United States, Hybrid

Excella is seeking an Information Systems Security Officer (ISSO) to support a federal government customer. In this role, you will lead efforts to gather and organize technical information about the program’s security posture and collaborate across teams to support ongoing security authorization activities. This position requires someone who can communicate effectively at all levels of the organization, exercise sound judgment with sensitive information, and proactively manage security documentation and compliance activities in a dynamic federal environment.

The ability to hold and maintain a DHS Public Trust is required.

• Lead efforts to gather and organize technical information about the program’s security posture and collaborate across teams to support ongoing security authorization.
• Proactively create, monitor, and update the status of POA&Ms to ensure weaknesses are resolved in accordance with their scheduled completion dates.
• Create Waivers or Risk Acceptance Memos to support effective management of system risks.
• Conduct annual assessments in accordance with DHS Information Security Performance Plan guidance.
• Review and update security authorization documents as needed, at minimum annually.
• Coordinate with Privacy, Records, and Information Governance Divisions on compliance documentation and requirements.
• Conduct Contingency Plan tests at least annually and update the plan accordingly.
• Perform system self-assessments as part of the customer’s Ongoing Authorization program.
• Monitor and respond to Information Security Vulnerability Management (ISVM) and Patch Management requirements.
• Provide audit support (Financial, A-123, FISMA, internal, DHS, etc.) through all phases - Pre, During, and Post Audit.
• Maintain current knowledge of inventory within the accreditation boundary.
• Proactively ensure security requirements are incorporated into the development cycle (Waterfall, Agile, Dev Sec Ops ).
• Ensure configuration management processes are followed to prevent the introduction of new security risks.
• Respond to emerging requirements driven by legislation, regulation, or policy changes.
• Support annual independent assessments per DHS Information Security Performance Plan guidance.

• 8+ years of experience in information security.
• Expertise in cybersecurity best practices, vulnerability management, and cybersecurity scanning tools.
• Expertise in Federal data privacy requirements and cloud-hosted cybersecurity management practices.
• One or more of the following certifications:
• CompTIA Security+ or equivalent
• Cloud Security certification (e.g., CCSP, AWS Security Specialty, Google Professional Cloud Security Engineer)
• Information Systems Security certification (e.g., CISSP, SSCP)
• Information Systems Security Management certification (e.g., CISM, CISSP-ISSMP)
• Ability to hold and maintain a DHS Public Trust.

• Workplace locations look different for everyone. Excellians are a distributed workforce and whether you’re working from your home office or a client site, we support a flexible work/life integration regardless of your location.
• We offer top of industry medical, dental, and vision benefits with multiple options to choose from such as an employer-contributed health savings account, infertility coverage, and orthodontia so you can select the plan that works best for you.
• Regardless of what stage of life you’re in, Excella wants to support you. We provide 8 weeks of Parental Leave, discounted pet insurance, and a  membership with 3 back-up emergency child or elder care days annually - all available to you on your first day.
• Starting day one, every employee is bonus eligible and receives 15 days of paid vacation, 6 federal holidays, and 4 floating holidays.
• Doing your best work means having the best tools! Excella’s TechEleX program provides you with multiple options to suit your technology needs. Choose between a variety of Mac or PC devices, and to ensure your hardware remains current, at the end of a 3-year period Excella will replace your existing computer with a new model from the program.…