Information Security Officer (ISSO) — Cloud Security & RMF

Accenture Federal Services; Town of Florida (NY); On-site; USD 100,000 - 203,000; Full time

Job summary

Accenture Federal Services is seeking an Information System Security Officer (ISSO) to support security controls and risk management for cloud-based information systems. The role emphasizes RMF/JSIG/ICD503 compliance, system authorization activities, and continuous monitoring to sustain secure operations.

You will review configurations, coordinate with admins, and analyze logs to identify vulnerabilities and ensure regulatory adherence across defense and civilian programs.

Qualifications

• 3 years of experience implementing security controls and managing cyber risk using RMF, JSIG, or ICD 503.
• 2 years of experience reviewing security documentation and conducting vulnerability assessments.
• Familiarity with cloud environments.
• Bachelor’s degree in Computer Science, Information Systems, Engineering, or related field, or 4+ years of relevant experience in lieu of degree.
• DoD 8140 compliance (e.g. Security+, CISSP, CASP, etc.)

Responsibilities

• Implement and manage security controls across cloud-based information systems.
• Support system authorization activities (A&A) and continuous monitoring efforts.
• Conduct security assessments and risk analyses to identify vulnerabilities and mitigation strategies.
• Review system configurations and security documentation to ensure compliance with baselines.
• Coordinate with system administrators and engineers to support secure system operations.
• Analyze logs and monitoring tools to identify anomalies, threats, and security events.

Skills

Security controls

Cyber risk

RMF/JSIG/ICD503

Education

Bachelor’s degree in CS/IS/Engineering

4+ years experience in lieu of degree

Tools

ACAS/Nessus

Splunk SIEM

Cloud tooling

Job description

Accenture Federal Services is seeking an Information System Security Officer (ISSO) to support security controls and risk management for cloud-based information systems. The role emphasizes RMF/JSIG/ICD503 compliance, system authorization activities, and continuous monitoring to sustain secure operations.

You will review configurations, coordinate with admins, and analyze logs to identify vulnerabilities and ensure regulatory adherence across defense and civilian programs.