Info Systems Security Officer — Remote Eligible & ATO Focus

Hiring Our Heroes; Arlington (VA); Hybrid; USD 90,000 - 130,000; Full time

Job summary

Hiring Our Heroes is seeking an Information Systems Security Officer (ISSO) to support full lifecycle A&A activities for federal information systems in Arlington, VA. The ISSO will ensure compliance with cybersecurity standards and maintain Authority to Operate through continuous monitoring and documentation.

The role covers risk assessments, Security Control Assessments, A&A documentation, vulnerability mitigation, ISCM, and the development of security plans and COOP/testing coordination with

Qualifications

• Five (5) years in Information Security or IT field.
• Experience developing, maintaining SA&A packages.
• Experience developing and maintaining POA&Ms.
• Strong problem solving and teamwork.
• Knowledge of federal cybersecurity frameworks (NIST RMF, FIPS 199, FISMA).
• Experience in security documentation and plans.
• Experience conducting audits and CPTs.

Responsibilities

• Lead and conduct Pre-Security Assessment and Authorization (A&A) activities.
• Support day-to-day IT security activities.
• Review system security posture and report findings to leadership.
• Perform FIPS-199 assessments and BIAs/PIAs.
• Develop and maintain System Security Plans and related documentation.
• Coordinate IT Contingency Plan testing with BCDR Office.
• Manage inter-agency documents (MOUs, MOAs, ISAs).
• Document and update Security Control Implementation details.
• Coordinate vulnerability scans and SCA activities.
• Manage POA&Ms and remediate findings.
• Prepare and present SAR to Authorizing Officials for ATO.
• Perform ISCM activities and maintain project schedules.
• Define baseline IT security requirements and system boundaries.

Skills

InfoSec experience

RMF knowledge

POA&M management

Vulnerability mgmt

Audit logs review

Tools

GRC tool

SA&A packages

Job description

Hiring Our Heroes is seeking an Information Systems Security Officer (ISSO) to support full lifecycle A&A activities for federal information systems in Arlington, VA. The ISSO will ensure compliance with cybersecurity standards and maintain Authority to Operate through continuous monitoring and documentation.

The role covers risk assessments, Security Control Assessments, A&A documentation, vulnerability mitigation, ISCM, and the development of security plans and COOP/testing coordination with