Lead Information System Security Officer (ISSO

About This Role

Devis is a leading provider of innovative software development, management, and consulting services, specializing in cutting-edge technologies such as Dev Sec Ops , AI, and Machine Learning. With over 30 years of experience, we have established ourselves as a trusted partner for government agencies, delivering tailored, mission-critical solutions that drive digital transformation and operational excellence. Our client-centric approach, coupled with our deep domain expertise and technical prowess, enables us to forge enduring relationships and consistently deliver high-impact, adaptive solutions that resonate with the unique needs of the public sector.

As Lead ISSO, you will manage day-to-day delivery of all ISSO support services and serve as the primary technical interface with the government Information System Security Manager, the CISO, the Authorizing Official and designated representatives, System Owners, and other federal cybersecurity stakeholders. This is a hands-on leadership role rather than a purely administrative one. You will work directly in the agency’s compliance platform, chair quality reviews of authorization artifacts before they reach the government, and carry the technical credibility to defend a risk position in front of federal decision-makers.

• Direct ISSO activities across the full compliance lifecycle: program governance, Risk Management Framework and authorization support, continuous monitoring, vulnerability and POA&M management, security documentation, security impact analysis and change coordination, incident response coordination, and audit and assessment support
• Oversee development, quality control, and submission of authorization packages in CSAM
• Chair internal quality reviews of every deliverable before it goes to the government
• Maintain personal hands-on proficiency across CSAM, Service Now, Splunk, and enterprise vulnerability scanning platforms

• Serve as the primary technical interface with the government ISSM, CISO, Authorizing Official and designated representatives, System Owners, and Common Control Providers
• Represent the team in agency governance forums including the Enterprise Review Board, Change Control Board, Cybersecurity Steering Committee, Risk Management Working Group, and Privacy Working Group
• Prepare and present authorization decision briefings to federal leadership
• Escalate risks and issues to government leadership with a recommended course of action attached

• Maintain the risk and issue register and drive items to documented closure
• Produce weekly activity reports, monthly program status reports, and quarterly executive review materials
• Track and report service-level and key-performance-indicator results across every work area
• Coordinate with corporate program management on staffing, reporting, and invoicing

• Meet rapid-response commitments, including four-hour notification on known exploited vulnerabilities, one-business-day triage of critical findings, and one-hour incident acknowledgement during core hours
• Monitor first-time acceptance rates on deliverables and drive corrective action on any nonconformance
• Keep records audit-ready between audits, so evidence can be produced without a scramble

• Bachelor’s degree in cybersecurity, computer science, information systems, or a related technical discipline
• Minimum 10 years of cybersecurity experience
• At least 5 years in ISSO, ISSM, or Risk Management Framework-centric roles supporting federal information systems
• Demonstrated experience leading RMF authorization efforts under NIST SP 800-37 Revision 2, including System Security Plans, security assessment plans and reports, and POA&M lifecycle management
• Experience presenting to and coordinating with federal governance bodies and authorizing officials

• CISSP or CISM, or a comparable advanced security certification

• Hands-on experience with a federal governance, risk, and compliance platform. CSAM strongly preferred; eMASS,…