Information Systems Security Officer Jobs

Senior Information System Security Officer

We are seeking a highly skilled and mission-driven Senior Information Systems Se...

Location

United States , Clarksburg

Salary:

Not provided

Innovative Management & Technology Services

Expiration Date

Until further notice

Requirements

Bachelor’s degree in Cybersecurity, Information Systems, Computer Science, or a related field (or equivalent combination of education and experience)
8+ years of progressive experience in information systems security, with at least 3 years in a senior-level or lead ISSO role supporting federal or state government agencies
Strong working knowledge of: NIST 800-53, RMF, FISMA, OWASP Top 10, and SANS Institute standards
SAFe Agile environments and integrating security in Agile workflows
Networking, Linux/Windows system administration, and secure software development practices
Cloud platforms (AWS, Azure, GCP) and related security tools (e.g., AWS Security Hub, Azure Defender)
Experience in managing security documentation, participating in audits, and working with compliance frameworks
Relevant certifications such as CISSP, CISM, Security+, CEH, or equivalent
Active Top Secret clearance is required
U.S. Citizenship is required

Job Responsibility

Lead the implementation and maintenance of system security controls in compliance with federal cybersecurity frameworks, including NIST SP 800-53, RMF, OWASP, DISA STIGs, and Common Criteria
Oversee the full lifecycle of Authorization to Operate (ATO) processes, including preparation of System Security Plans (SSPs), Security Assessment Reports (SARs), POA&Ms, and risk assessments
Serve as a senior security advisor and liaison to system owners, developers, DevOps engineers, and government stakeholders
Participate in technical reviews of system architecture and ensure secure design of virtualized and software-defined infrastructures
Support integration of security controls into CI/CD pipelines using DevSecOps principles and tools (e.g., Jenkins, GitLab CI, SonarQube, Snyk)
Provide security engineering support for modern cloud environments, including AWS, Azure, or Google Cloud Platform, and assess cloud-native security capabilities
Conduct vulnerability assessments, interpret scan results from tools like Tenable, Nessus, Splunk, or Qualys, and lead remediation efforts
Mentor junior ISSOs and analysts on security policies, best practices, and tool usage
Ensure continuous monitoring activities are aligned with organizational risk tolerance and compliance goals

What we offer

competitive compensation
excellent benefits including tuition reimbursement and employer-contributed 401K
referral bonuses

Fulltime

Information Systems Security Officer

Hoplite Solutions is seeking Information Systems Security Officers (ISSO) to joi...

Location

United States , Fort Meade

Salary:

125000.00 - 195000.00 USD / Year

Hoplite Solutions

Expiration Date

Until further notice

Requirements

Active TS/SCI with Polygraph
A Bachelor’s degree in Computer Science, Information Technology Engineering, or a related field may be substituted for 4 years’ experience and 10 years of related work experience in the field of security authorization
DoD 8570.1 compliant IAM Level I certification, such as the CompTIA Security+ certification. A higher-level certification, such as GSLC, CAP, CASP, CISM and/or CISSP will also be accepted
A working knowledge of the security authorization processes and procedures as defined in the RMF in NIST SP800-37 and familiarity with the ICD503, CNSSI1253, SP800-53, etc.
Knowledge of commercial security tools and their uses
Experience with hardware/software security implementations
Knowledge of different communication protocols, encryption techniques/tools, and PKI and authorization services
Familiarity with security incident management, experience collaborating with Incident Response Teams, and able to provide viable recommendations for the resolution or computer security incidents and vulnerability compliance
Experience creating and presenting documentation and management reports
Must put forward a professional behavior that enhances productivity and promotes teamwork and cooperation

Job Responsibility

Maintain the appropriate operational security posture for assigned systems, programs, and/or enclaves
Provide guidance and technical expertise on all matters that impact or effect the security of the information system
Assist in the development and execution of an enterprise level continuous monitoring program to minimize security risks and ensure compliance with that program on a routine basis
Developing, updating, and submitting the System Security Plan and other required documentation that make up the Security Authorization Package
Conduct configuration management for security-relevant changes to software, hardware, and firmware
Perform and deliver security impact analyses of changes to the system or its environment of operation
Assess the effectiveness of system security controls on an ongoing basis to determine system security status
Maintain and enforce IT security policies and implementation guidelines for customer systems in diverse operational environments
Provides configuration management for security-relevant information system software, hardware, and firmware

What we offer

7% employer 401k contribution
fully paid healthcare for our employees
outstanding training benefits
company funded life insurance and short-term disability insurance

Fulltime

Information Systems Security Officer

The Information Systems Security Officer (ISSO) is responsible for safeguarding ...

Location

United States; Canada , Athens, Georgia; Atlanta, Georgia; Toronto, Ontario

Salary:

Not provided

Docebo

Expiration Date

Until further notice

Requirements

8+ years of experience in information systems security, with a focus on compliance with NIST and DoD guidelines
In-depth knowledge of FedRAMP, NIST SP 800-37, NIST SP 800-53, and DoD 8510.01 policies and procedures
Strong technical writing skills for developing SOPs, work instructions, and senior-level briefs
Proficient in risk and vulnerability assessment, security infrastructure design, and continuous monitoring
Prior experience on obtaining FedRamp ATO

Job Responsibility

Own the FedRAMP/DoD RMF authorization lifecycle for assigned systems (strategy → authorization → continuous monitoring → ATO maintenance)
Define and maintain the FedRAMP program governance model, roles & responsibilities (including Sponsor/Authorizing Official interactions)
Create, own, maintain, and version-control the System Security Plan (SSP), Security Assessment Report (SAR), continuous monitoring (ConMon) artifacts, POA&Ms, SSP annexes, and all ATO package deliverables
Build and run the ConMon program: define telemetry requirements, dashboards, vulnerability ingestion, thresholds, incident feed, and reporting cadence
Triage vulnerabilities, manage POA&Ms (track remediation owners, dates, residual risk), and ensure POA&M closure meets customer and FedRAMP expectations
Lead the selection, engagement, and technical coordination with 3PAOs and any external assessors. Ensure assessments, testing, and SAR content are accurate and timely
Evaluate security impact for architectural or operational changes (Security Impact Analysis), own risk acceptance processes, and coordinate Risk Acceptance with Sponsors/Authorizing Officials
Integrate change control with the ConMon program to ensure authorized/approved changes are documented and do not break control baselines
Act as the primary internal liaison across Product, Engineering, DevOps, Security, Sales, Legal, and Marketing for anything impacting the FedRAMP posture and ATO timelines. Drive working groups and weekly syncs
Support pre-sales and customer conversations on FedRAMP posture and timelines alongside Sales

What we offer

Generous Vacation Policy, plus extra floating holidays to use for religious or cultural events that matter to you
Employee Share Purchase Plan
Career progression/internal mobility opportunities
Four employee resource groups to get involved with (the Docebo Women's Alliance, PRIDE, BIDOC, and Green Ambassadors)
WeWork partnership and “Work from Anywhere” program

Fulltime

Information Systems Security Officer – Expert

Location

Salary:

Not provided

Cognito Cyber Group

Expiration Date

Until further notice

Requirements

Provide information assurance support to system(s) and program
Demonstrated experience with coordinating and implementing cyber security policies, standards and processes
Maintain operational security posture for system(s) through customized Risk Management Framework (RMF)
Strong knowledge of AWS infrastructure, Commercial cloud and cloud security
Evaluate security solutions to ensure security requirements are met for processing classified information
Provide configuration management and documentation for system software, hardware, networks, enclaves, etc.
Prepare and review system documentation to include Systems Security Plans (SSPs), Certification and Accreditation (C&A) packages, architecture diagrams, contingency plan, incident response plan, and other documentation
Support programmatic and organization project and risk management review boards
Perform vulnerability scanning, risk assessment analysis using NIST 800-53 and prepare responses to Plan of Action and Milestones (POA&Ms)
Understanding of NIST 800-53, NIST 800-37, RMF, ICD 503, CNSSI 1253

Chief Information Security Officer

The San Francisco Department of Public Health is seeking a dynamic and experienc...

Location

United States , San Francisco

Salary:

180440.00 - 230308.00 USD / Year

City and County of San Francisco

Expiration Date

January 09, 2026

Requirements

Bachelor’s degree from an accredited college or university
Five (5) years of professional healthcare information systems security experience, of which three (3) years must include supervising IT professionals

Job Responsibility

Provides strategic leadership in evaluating and mitigating information security threats across the organization using a structured, risk-based methodology
Directs the ongoing development of the department’s information security program, including project portfolio management, incident response, policy frameworks, compliance activities, threat and vulnerability management, and third-party risk management
Allocates and manages resources to support a robust security strategy
Partners with the Office of Compliance and Privacy Affairs to assess data security risks related to contracts, projects, artificial intelligence solutions, and other initiatives
Builds alignment and support for security goals and initiatives across internal and external stakeholders
Promotes awareness and understanding of regulatory requirements across the organization
Analyzes security requirements and ensures compliance with industry standards such as HIPAA, NIST, and PCI-DSS
Establishes and maintains comprehensive policies and procedures to support effective and sustainable security operations
Serves as the department’s representative in security-related matters with City agencies and partners
Continuously monitors emerging trends, technologies, and best practices in cybersecurity

Fulltime

Senior Information Security Officer

In a world of technology, people make the difference. We believe if we invest in...

Location

United States , Reston

Salary:

Not provided

AnaVation

Expiration Date

Until further notice

Requirements

Demonstrates strong experience with IC/DoD customer's Assessment and Authorization (A&A) process (e.g., RMF, NIST800-53, ICD503)
Experience in developing and implementing DoD/DIA approved information security controls, procedures and documentation for the operation of standalone classified systems
A Bachelor’s Degree from an accredited institute in an area applicable to this position and eight (8) years of relevant experience
An additional four (4) years of relevant experience may be substituted for the bachelor’s degree
Must presently be 8570 compliant (IAT Level 2 preferred)
Experience with one or more commercial government cloud service provider’s system accreditation processes
Experience with the Xacta
Experience as a Cybersecurity Control Assessor
Experience with Ongoing Authorizations and Assessments
Experience with C2S Cloud, or DevOpsSec

Job Responsibility

Provide subject matter expertise and consulting on security related matters for enterprise information system and network architectures, access problems, and implementation of security policies and procedures
Assist in overseeing and managing day-to-day operation of Information Systems
Optimize system operation and resource utilization and performs system capacity planning/analysis while maintaining the security posture
Assist team in DIA’s Authorization and Accreditation (A&A) process using RMF across the design lifecycle for classified systems obtaining and maintaining Interim Authority to Operate (ATO), ATO and Authority to Connect (ATC)
Create and process RMF authorization packages from submission to approval/disapproval
Develop and maintain IT security documents, including system security plans, risk assessments, Plan of Action and Milestones (POA&M), contingency plans, incident response plans, IT security policies and procedures
Provide recommendations regarding remediation and mitigation of identified vulnerabilities by developing plan of action and milestones (POA&Ms)
Advise developers on integrating security requirements
Demonstrate a strong understanding of Networks, Cloud, and IT system security authorization procedures

What we offer

Generous cost sharing for medical insurance for the employee and dependents
100% company paid dental insurance for employees and dependents
100% company paid long-term and short term disability insurance
100% company paid vision insurance for employees and dependents
401k plan with generous match and 100% immediate vesting
Competitive Pay
Generous paid leave and holiday package
Tuition and training reimbursement
Life and AD&D Insurance

Fulltime

Senior Information System Security Officer

Come join our growing team and make a difference every day! AnaVation is seeking...

Location

United States , Washington

Salary:

Not provided

AnaVation

Expiration Date

Until further notice

Requirements

Bachelor’s degree in Cybersecurity, Information Technology, or a related field
Minimum of six (6) years of hands-on experience in cybersecurity and expert knowledge of Governance Risk and Compliance
At least three (3) years supporting and maintaining system authorizations for complex systems
Demonstrated expertise in the Risk Management Framework (RMF), NIST SP 800-53 Rev 5, and related federal cybersecurity policies
Extensive experience managing ATO/ATT processes, security control assessments, POA&M lifecycle, vulnerability management, and audit response
Strong leadership experience mentoring junior and mid-level ISSOs and interfacing with senior government leadership
Must possess at least two of the following active certifications: Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Certified Governance, Risk and Compliance (CGRC), Certified in Risk and Information Systems Control (CRISC), Information Systems Security Management Professional (ISSMP), Certified Information Systems Auditor (CISA), Certified Cloud Security Professional (CCSP), Certified Ethical Hacker (CEH), CompTIA Security+, Project Management Professional (PMP)
Proficiency in tools such as JCAM, Tenable Nessus, BigFix and Splunk
Ability to develop, review, and present high-level security documentation and briefings
Strong understanding of cloud platforms (IaaS, PaaS, SaaS), supply chain risk management, and incident response procedures

Job Responsibility

Support the maintenance of security documentation and support system ATO and ATT efforts
Conduct security control assessments and provide recommendations for remediation
Perform biweekly audit log and vulnerability scan reviews and track POA&M items
Collaborate with system owners and technical teams to manage risk and respond to incident
Support Ongoing Authorization (OA) and continuous monitoring activities
Prepare and brief senior leadership on system security posture and compliance metric
Ensure alignment with cybersecurity policies and NIST SP 800-53, 800-37, and 800-137

What we offer

Generous cost sharing for medical insurance for the employee and dependents
100% company paid dental insurance for employees and dependents
100% company paid long-term and short term disability insurance
100% company paid vision insurance for employees and dependents
401k plan with generous match and 100% immediate vesting
Competitive Pay
Generous paid leave and holiday package
Tuition and training reimbursement
Life and AD&D Insurance

Fulltime

Mid-Level Information System Security Officer

Come join our growing team and make a difference every day! AnaVation is seeking...

Location

United States , Washington, DC

Salary:

Not provided

AnaVation

Expiration Date

Until further notice

Requirements

Bachelor’s degree in Cybersecurity, Information Technology, or a related field
Minimum of four (4) years of hands-on experience in cybersecurity
Knowledge of Governance Risk and Compliance with at least one (1) year maintaining an Authorization to Operate (ATO) for a moderate or high-impact federal information system
Strong working knowledge with Federal policies, program standards, and NIST Special Publications guidelines
Experience drafting, reviewing, and maintaining system security documentation
Proficient in using various security tools
Strong communication, written, and presentation skills
Provide support and mentorship for Tier I ISSOs
Familiarity with vulnerability scanning tools and interpreting results
Must possess at least one of the following certifications: CISSP, CISM, CGRC, CRISC, ISSMP, CISA, CCSP, CEH, CompTIA Security+, PMP

Job Responsibility

Support the maintenance of security documentation and support system ATO and ATT efforts
Conduct security control assessments and provide recommendations for remediation
Perform biweekly audit log and vulnerability scan reviews and track POA&M items
Collaborate with system owners and technical teams to manage risk and respond to incident
Support Ongoing Authorization (OA) and continuous monitoring activities
Prepare and brief senior leadership on system security posture and compliance metric
Ensure alignment with DOJ cybersecurity policies and NIST SP 800-53, 800-37, and 800-137

What we offer

Generous cost sharing for medical insurance for the employee and dependents
100% company paid dental insurance for employees and dependents
100% company paid long-term and short term disability insurance
100% company paid vision insurance for employees and dependents
401k plan with generous match and 100% immediate vesting
Competitive Pay
Generous paid leave and holiday package
Tuition and training reimbursement
Life and AD&D Insurance

Fulltime

Information Systems Security Officer

Hoplite Solutions

Location:
United States, Fort Meade

Category:
IT - Administration

Contract Type:
Not provided

Salary:

Job Description:

Job Responsibility:

Requirements:

Nice to have:

Additional Information:

Job Posted:
December 09, 2025

Looking for more opportunities? Search for other job offers that match your skills and interests.

Similar Jobs for Information Systems Security Officer

Senior Information System Security Officer

Information Systems Security Officer

Information Systems Security Officer

Information Systems Security Officer – Expert

Chief Information Security Officer

Senior Information Security Officer

Senior Information System Security Officer

Mid-Level Information System Security Officer

Information Systems Security Officer

Hoplite Solutions

Location:United States, Fort Meade

Category:IT - Administration

Contract Type:Not provided

Salary:

Job Description:

Job Responsibility:

Requirements:

Nice to have:

Additional Information:

Job Posted:December 09, 2025

Looking for more opportunities? Search for other job offers that match your skills and interests.

Similar Jobs for Information Systems Security Officer

Senior Information System Security Officer

Information Systems Security Officer

Information Systems Security Officer

Information Systems Security Officer – Expert

Chief Information Security Officer

Senior Information Security Officer

Senior Information System Security Officer

Mid-Level Information System Security Officer

Location:
United States, Fort Meade

Category:
IT - Administration

Contract Type:
Not provided

Job Posted:
December 09, 2025