Information System Security Officer Lead

SUMMARY

Agile Defense is seeking an experienced ISSO Lead with expertise in applying the Risk Management Framework (RMF) and NIST 800-series standards to protect multi‑tenant cloud and hybrid‑enterprise environments. Adept at conducting deep‑dive vulnerability analyses and engineering remediation plans that satisfy rigorous FISMA requirements. Recognized for the ability to translate technical security gaps into clear, executive‑level narratives that facilitate informed risk‑management decisions.

The ISSO Lead must also have extensive experience with security authorization processes, such as Authorization/Certification & Accreditation (A&A) and Authorization to Operate (ATO), along with the ability to develop associated documentation. A strong understanding of current security tools, multi‑tenant cloud environments, hardware/software security implementation, communication protocols, and encryption techniques is essential. Furthermore, the role requires a proven ability to analyze security vulnerabilities, provide comprehensive assessments, and develop effective remediation instructions.

Excellent written and verbal communication skills are paramount, enabling the ISSO Lead to present complex security information clearly and effectively to diverse audiences. This experience should be complemented by demonstrated expert knowledge of federal cybersecurity standards and best practices, including FISMA, NIST, and the Risk Management Framework (RMF) methodology.

Required Certifications

• Active Certified Information Systems Security Professional (CISSP)
• Active Certified Information Security Manager (CISM)
• Other relevant certifications (e.g., CCSP, CEH) may be considered.

Education, Background, and Years of Experience

• Bachelor’s degree in computer science, engineering, STEM, information technology, or cybersecurity.

Required Skills

• A minimum of 8 years of experience in information security, with at least 5 years specifically in a lead ISSO or similar leadership capacity on large complex USG programs.

Preferred Skills

• Active CISSP
• Active Project Management Professional (PMP) certification
• Active ISC2 Certified in Governance, Risk and Compliance (CGRC)
• Knowledge of FedRAMP
• Knowledge of A‑123 audit Experience and Expertise with GRC tools such as CSAM

Environmental Conditions

Hybrid role in Reston, VA

Strength Demands

Physical Requirements

$145,000 - $165,000 a year

Equal Opportunity Employer/Protected Veterans/Individuals with Disabilities