Information Security Officer

4A Consulting, LLC; Crownsville (MD); On-site; USD 120,000 - 180,000; Full time

Job summary

4A Consulting, LLC in Baltimore, MD seeks a Senior Information Security Officer to lead cybersecurity operations, risk management, compliance, and secure architecture initiatives across enterprise systems.

The role partners with business and IT teams to ensure systems meet industry standards such as ISO 27001 and NIST CSF, while guiding governance, incident response, and secure cloud/on‑premises designs. Hands-on leadership will drive security metrics, training, and secure project delivery.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, Information Security, or related field.
• 5+ years of experience in information security management, IT administration, cybersecurity, or related fields.
• 3+ years of experience implementing cybersecurity assessment and remediation plans, procedures, and defensive operations.
• Hands-on experience with risk management, incident response, vulnerability management, and security compliance.
• Strong understanding of ISO 27001, NIST Cybersecurity Framework, and other industry security frameworks.

Responsibilities

• Lead daily cybersecurity operations and implementation of information security initiatives, ensuring effective security governance and compliance.
• Develop and maintain security metrics to track control adoption, measure effectiveness, and identify areas for improvement.
• Review, update, and enforce security policies and procedures aligned with ISO 27001, NIST CSF, and other applicable standards.
• Conduct vulnerability assessments, analyze findings, prioritize risks, and coordinate remediation activities with relevant stakeholders.
• Participate in Authorization to Operate (ATO) assessments to validate security compliance and production readiness.
• Collaborate with cross-functional teams to strengthen security protocols, system designs, and operational processes.
• Design and implement secure architectures across cloud, on-premises, and hybrid environments.
• Lead and manage cybersecurity projects, ensuring successful and timely delivery of security initiatives.
• Develop and deliver security awareness and training programs to improve organizational security posture.
• Maintain and execute incident response plans to ensure preparedness and effective response to security incidents.
• Monitor security systems and activities to identify, investigate, and respond to potential threats.
• Prepare and present security reports, dashboards, risk assessments, and compliance documentation to leadership and stakeholders.
• Develop strategic security roadmaps focused on service delivery, resource optimization, and continuous improvement.
• Serve as a primary point of contact for agency-related cybersecurity inquiries, security engagements, and information security initiatives.
• Coordinate with technical and business stakeholders to ensure security requirements are incorporated throughout the system and application lifecycle.

Skills

Information security management

IT administration

Cybersecurity

Risk management

Incident response

Vulnerability management

Security governance

Security compliance

Analytical skills

Communication skills

Education

Bachelor's degree in Computer Science, Information Technology, Information Security, or related field

Job description

At 4A Consulting, we turn complexity into opportunity. Founded in 2014 and headquartered in Baltimore, MD, we are a women-owned, boutique consulting firm specializing in delivering innovative, data-driven solutions to both the Federal Government and Fortune 500 clients. Our team blends deep industry knowledge with advanced technologies to design tailored strategies that drive measurable and sustainable outcomes. We pride ourselves on an agile, collaborative approach that helps organizations navigate challenges and seize emerging opportunities in a rapidly evolving digital landscape. At 4A, we don’t just deliver projects, we build trusted partnerships that empower our clients to lead with confidence in the digital age.

Position Overview

We are seeking a Senior Information Security Officer (ISO) to lead cybersecurity operations, risk management, compliance, and secure architecture initiatives across enterprise systems. The ideal candidate will provide strategic security leadership while maintaining hands‑on involvement in security governance, vulnerability management, incident response, compliance assessments, and secure architecture.

The role will work closely with business and IT teams to ensure systems, networks, and services align with industry best practices, regulatory requirements, security frameworks, and organizational objectives.

Key Responsibilities

• Lead daily cybersecurity operations and implementation of information security initiatives, ensuring effective security governance and compliance.
• Develop and maintain security metrics to track control adoption, measure effectiveness, and identify areas for improvement.
• Review, update, and enforce security policies and procedures aligned with ISO 27001, NIST Cybersecurity Framework, and other applicable standards.
• Conduct vulnerability assessments, analyze findings, prioritize risks, and coordinate remediation activities with relevant stakeholders.
• Participate in Authorization to Operate (ATO) assessments to validate security compliance and production readiness.
• Collaborate with cross‑functional teams to strengthen security protocols, system designs, and operational processes.
• Design and implement secure architectures across cloud, on‑premises, and hybrid environments.
• Lead and manage cybersecurity projects, ensuring successful and timely delivery of security initiatives.
• Develop and deliver security awareness and training programs to improve organizational security posture.
• Maintain and execute incident response plans to ensure preparedness and effective response to security incidents.
• Monitor security systems and activities to identify, investigate, and respond to potential threats.
• Prepare and present security reports, dashboards, risk assessments, and compliance documentation to leadership and stakeholders.
• Develop strategic security roadmaps focused on service delivery, resource optimization, and continuous improvement.
• Serve as a primary point of contact for agency‑related cybersecurity inquiries, security engagements, and information security initiatives.
• Coordinate with technical and business stakeholders to ensure security requirements are incorporated throughout the system and application lifecycle.

Required Qualifications

• Bachelor’s degree in Computer Science, Information Technology, Information Security, Cybersecurity, or a related field.
• 5+ years of experience in information security management, IT administration, cybersecurity, or related fields.
• 3+ years of experience implementing cybersecurity assessment and remediation plans, procedures, and defensive operations.
• Hands‑on experience with risk management, incident response, vulnerability management, and security compliance.
• Strong understanding of ISO 27001, NIST Cybersecurity Framework, and other industry security frameworks.
• Experience with enterprise security tools, technologies, methodologies, and security controls.
• Experience supporting security governance, compliance assessments, and risk remediation activities.
• Strong analytical, problem‑solving, organizational, and communication skills.
• Proven ability to manage multiple priorities and cybersecurity projects in a fast‑paced environment.
• Ability to communicate complex security risks and recommendations effectively to both technical and non‑technical stakeholders.

Preferred Qualifications

• CISSP, CISM, CISA, CISSO, Security+, or other relevant cybersecurity certifications.
• Experience developing strategic cybersecurity plans, roadmaps, and business cases for enterprise initiatives.
• Demonstrated ability to lead cross‑functional teams in the delivery of cybersecurity programs.
• Knowledge of federal, state, and local information security and privacy regulations.
• Familiarity with centrally managed cybersecurity services and security adoption tracking.
• Experience with cloud security and modern IT environments.
• Experience supporting enterprise security transformation and modernization initiatives.

Why Join 4A

• Be part of a mission‑driven, women‑owned consulting firm with a reputation for excellence.
• Work on high‑impact projects across federal and commercial clients.
• Collaborate in an inclusive, growth‑oriented culture where innovation is valued.
• Access career development programs, mentorship, and learning opportunities.
• Enjoy a comprehensive benefits package, flexible work options, and a focus on work‑life balance.

Equal Opportunity Statement

4A Consulting is an Equal Opportunity Employer. We celebrate diversity and are committed to creating an inclusive environment for all employees. All employment decisions are made without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability status, protected veteran status, or any other characteristic protected by law.