Information System Security Officer

Information System Security Officer

Anywhere

Type: Contract-to-Hire

Category: Security

Industry: Government

Workplace Type: Remote

Reference : JN -

Date Posted: 12/20/2025

Location: Washington DC

Pay Rate: $60 – $70 / hr

The Information System Security Officer (ISSO) serves as the principal advisor to system owners on all matters related to cybersecurity compliance, risk management, and operational security. This role is critical in ensuring that systems maintain their Authorization to Operate (ATO) and comply with Departmental and federal cybersecurity standards.

The ISSO will lead efforts across the full lifecycle of the Risk Management Framework (RMF), ensuring systems are secure, compliant, and resilient against evolving threats.

• Implement and document security controls in alignment with NIST SP 800-53 and the Risk Management Framework (RMF).
• Manage the entire RMF lifecycle, including security categorization, control selection and implementation, security testing and evaluation, and continuous monitoring.
• Develop and maintain comprehensive security documentation:
  System Security Plans (SSPs), Security Assessment Reports (SARs), and Plans of Action and Milestones (POA&Ms).
• Conduct regular security scans, vulnerability assessments, and compliance testing.
• Support internal and external audits by preparing and submitting required documentation and evidence.
• Identify, document, and track system vulnerabilities and coordinate remediation efforts.
• Serve as the central point of contact for system-level cybersecurity issues and inquiries.

• 5 years of experience in an ISSO or equivalent cybersecurity role.
• Strong understanding of NIST RMF, FISMA, and CISA directives.
• Hands‑on experience with vulnerability management and risk assessment tools.
• Excellent technical writing, documentation, and reporting skills.
• Ability to work independently and collaboratively in a remote environment.

• Experience supporting federal agencies or working in regulated environments.
• Familiarity with cloud security (AWS, Azure, etc.).
• Knowledge of GRC tools and SIEM platforms.

• A bachelor’s degree is required.
• A Secret or Top Secret security clearance is required.

Skills, experience, and other compensable factors will be considered when determining pay rate. The pay range provided in this posting reflects a W2 hourly rate; other employment options may be available that may result in pay outside of the provided range.

Eliassen Group is an Equal Opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, gender identity, national origin, age, protected veteran status, or disability status.