Information System Security Officer

Eliassen Group; Remote; USD 80,000 - 100,000; Full time

Job summary

A cybersecurity firm is seeking an Information System Security Officer to lead the Risk Management Framework lifecycle and ensure compliance with federal cybersecurity standards. Ideal candidates have 5+ years in a similar role and a strong understanding of NIST RMF, FISMA, and CISA directives. This remote position offers a competitive hourly pay rate of $60-$70, and a bachelor's degree along with a security clearance is required for consideration.

Benefits

Equal Opportunity Employer

Qualifications

• 5 years of experience in an ISSO or equivalent cybersecurity role.
• Strong understanding of NIST RMF, FISMA, and CISA directives.
• Excellent documentation and reporting skills.

Responsibilities

• Implement and document security controls based on NIST SP 800-53.
• Manage the entire RMF lifecycle including security assessments.
• Conduct regular security scans and compliance testing.

Skills

Cybersecurity compliance

Risk management

Technical writing

Vulnerability management

Education

Bachelor's degree

Tools

NIST RMF

FISMA

Job description

Information System Security Officer

Anywhere

Type: Contract-to-Hire

Category: Security

Industry: Government

Workplace Type: Remote

Reference ID: JN -092025-103788

Date Posted: 12/20/2025

Location: Washington DC

Pay Rate: $60 – $70 / hr

The Information System Security Officer (ISSO) serves as the principal advisor to system owners on all matters related to cybersecurity compliance, risk management, and operational security. This role is critical in ensuring that systems maintain their Authorization to Operate (ATO) and comply with Departmental and federal cybersecurity standards.

The ISSO will lead efforts across the full lifecycle of the Risk Management Framework (RMF), ensuring systems are secure, compliant, and resilient against evolving threats.

Responsibilities

• Implement and document security controls in alignment with NIST SP 800-53 and the Risk Management Framework (RMF).
• Manage the entire RMF lifecycle, including security categorization, control selection and implementation, security testing and evaluation, and continuous monitoring.
• Develop and maintain comprehensive security documentation: System Security Plans (SSPs), Security Assessment Reports (SARs), and Plans of Action and Milestones (POA&Ms).
• Conduct regular security scans, vulnerability assessments, and compliance testing.
• Support internal and external audits by preparing and submitting required documentation and evidence.
• Identify, document, and track system vulnerabilities and coordinate remediation efforts.
• Serve as the central point of contact for system-level cybersecurity issues and inquiries.

Qualifications

• 5 years of experience in an ISSO or equivalent cybersecurity role.
• Strong understanding of NIST RMF, FISMA, and CISA directives.
• Hands‑on experience with vulnerability management and risk assessment tools.
• Excellent technical writing, documentation, and reporting skills.
• Ability to work independently and collaboratively in a remote environment.

Preferred Skills

• Experience supporting federal agencies or working in regulated environments.
• Familiarity with cloud security (AWS, Azure, etc.).
• Knowledge of GRC tools and SIEM platforms.

Education & Clearance

• A bachelor’s degree is required.
• A Secret or Top Secret security clearance is required.

Skills, experience, and other compensable factors will be considered when determining pay rate. The pay range provided in this posting reflects a W2 hourly rate; other employment options may be available that may result in pay outside of the provided range.

Eliassen Group is an Equal Opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, gender identity, national origin, age, protected veteran status, or disability status.