Information Security Officer

STOPSO

Washington (District of Columbia)

On-site

USD 120,000 - 180,000

Full time

7 days ago

Be an early applicant

Get more replies from employers

Send a job-specific resume in minutes.

Job summary

STOPSO is seeking an Information Security Officer to support a federal client, overseeing planning, execution, and delivery of all program activities to ensure secure and compliant operations.

You will provide advisory services, lead security architecture, manage ATO/ATU processes, and implement continuous monitoring, data protection, and incident response. Collaboration with government stakeholders and cloud engineering teams is essential to align security with mission goals.

Qualifications

Bachelor's or Master's degree in Cybersecurity, Information Technology, Computer Science, or related field
Minimum 5 years of information security experience, including federal cloud security environments
Proven experience supporting ATO/ATU processes and continuous monitoring in government environments
Experience securing cloud environments, preferably Microsoft Azure, including identity, networking, and data protection controls
Hands-on experience with vulnerability management, incident response, and risk assessment processes
Ability to obtain and maintain a Public Trust clearance and comply with federal security training requirements
CISSP Certification
CCSP Certification
CompTIA Cloud+ Certification

Responsibilities

Provide security advisory services and operational support for a secure Azure cloud data platform environment
Support enforcement of federal security requirements including FISMA, NIST SP 800-53, FedRAMP, OMB, and DHS guidance
Lead security architecture and design activities including Zero Trust, RBAC/ABAC, encryption, and identity integration
Oversee Authority to Operate (ATO) processes, including development of security documentation, control assessments, and coordination with Authorizing Officials and OCIO
Conduct continuous monitoring activities including vulnerability scanning, compliance checks, audit logging, and security metrics reporting
Identify, assess, and mitigate security risks, including managing POA&Ms, audit findings, and system vulnerabilities
Ensure data protection controls including encryption in transit and at rest, key management, data classification, and privacy compliance for PII/CUI/PHI
Support incident response activities including detection, reporting, investigation, forensics, and remediation in coordination with FTC CSIRT
Develop and maintain security documentation including risk assessments, system security plans, POA&Ms, and compliance artifacts
Provide cybersecurity input to cloud engineering efforts such as identity integration (Entra ID), SIEM integration (Microsoft Sentinel), and secure data pipeline configurations
Conduct vulnerability assessments, penetration testing coordination, and supply chain risk assessments for cloud services and tools
Collaborate with program management, engineering, and data teams to ensure security is integrated across all solution components
Serve as the designated Information System Security Officer (ISSO) and act as a primary point of contact for security-related audits, data calls, and compliance reviews

Skills

Security architecture

Zero Trust

Threat detection

Vulnerability management

Data protection

Identity & access management

SIEM

Azure security

Risk assessments

Audit & compliance

Education

Cybersecurity degree

CISSP Certification

CCSP Certification

CompTIA Cloud+ Certification

Tools

Microsoft Sentinel

Entra ID

Vulnerability scanners

Job description

Brief Overview Of Position

Strategic Operational Solutions (STOPSO) is seeking candidates for an Information Security Officer role to support a federal client where we are focused on delivering innovative operations and solutions through proven successful methods. This individual is responsible for the planning, execution, and delivery of all program activities supporting the project. The Information Security Officer will ensure STOPSO provides advisory services, operational assistance for Government-managed and licensed components, and the expertise necessary to ensure secure and compliant operations.

Responsibilities

Provide security advisory services and operational support to ensure a secure, compliant cloud data platform environment in Microsoft Azure

Support implementation and enforcement of federal security requirements including FISMA, NIST SP 800-53, FedRAMP, OMB, and DHS guidance

Lead security architecture and design activities including Zero Trust implementation, RBAC/ABAC access control, encryption, and identity integration

Oversee Authority to Operate (ATO) processes, including development of security documentation, control assessments, and coordination with Authorizing Officials and OCIO

Conduct continuous monitoring activities including vulnerability scanning, compliance checks, audit logging, and security metrics reporting

Identify, assess, and mitigate security risks, including managing POA&Ms, audit findings, and system vulnerabilities

Ensure proper data protection controls including encryption in transit and at rest, key management, data classification, and privacy compliance for PII/CUI/PHI

Support incident response activities including detection, reporting, investigation, forensics, and remediation in coordination with FTC CSIRT

Develop and maintain security documentation including risk assessments, system security plans, POA&Ms, and compliance artifacts

Provide cybersecurity input to cloud engineering efforts such as identity integration (Entra ID), SIEM integration (Microsoft Sentinel), and secure data pipeline configurations

Conduct vulnerability assessments, penetration testing coordination, and supply chain risk assessments for cloud services and tools

Collaborate with program management, engineering, and data teams to ensure security is integrated across all solution components

Serve as the designated Information System Security Officer (ISSO) and act as a primary point of contact for security-related audits, data calls, and compliance reviews

Minimum Qualifications

Bachelor's or Master's degree in Cybersecurity, Information Technology, Computer Science, or related field

Minimum 5 years of experience in information security, including federal cloud security environments of similar scope and complexity

Proven experience supporting ATO/ATU processes and continuous monitoring in government environments

Experience securing cloud environments, preferably Microsoft Azure, including identity, networking, and data protection controls

Hands-on experience with vulnerability management, incident response, and risk assessment processes

Ability to obtain and maintain a Public Trust clearance and comply with federal security training requirements

Required Certifications:

Certified Information Systems Security Professional (CISSP) Certification

Certified Cloud Security Professional (CCSP) Certification

CompTIA Cloud+ Certification

Skills And Competencies

Strong background in network security, threat detection, and vulnerability management

In-depth knowledge of securing cloud environments (e.g., Microsoft Azure) and services related to big data

Proficiency in data encryption, masking, anonymization, and data loss prevention

Specific expertise in securing large-scale data systems

Proven experience in handling security incidents from detection and analysis to recovery and post-incident reporting

Deep knowledge of federal cybersecurity frameworks, including NIST SP 800-53, NIST SP 800-207 (Zero Trust), and FedRAMP requirements

Proficiency in security technologies including SIEM tools (e.g., Microsoft Sentinel), identity and access management (Entra ID), and vulnerability scanning tools