Information System Security Officer (ISSO)

Network Designs; McLean (VA); Remote; USD 110,000 - 150,000; Full time

Benefits offered by this job

Health, dental, vision insurance

401(k) retirement matching

Paid leave and holidays

Life and disability insurance

Professional development

Job summary

Network Designs, Inc. (NDi) seeks an experienced Information System Security Officer (ISSO) to support cybersecurity, RMF, and system authorization within a large federal data and cloud environment.

This hands-on role covers RMF/ATO, NIST 800-53 controls, vulnerability management, POA&M remediation, and continuous monitoring, collaborating with system owners, engineers, architects, and cybersecurity stakeholders to identify risks and drive closure.

Qualifications

• Bachelor's degree or equivalent education in a related field is preferred.
• Minimum of 4 years in cybersecurity, information assurance, RMF, or related federal security work.
• Experience supporting RMF/ATO activities and applying NIST SP 800-53 controls.
• Hands-on in remediation of POA&Ms and vulnerability findings.
• Ability to document security controls and authorization evidence.
• Strong writing, communication, and organizational skills.

Responsibilities

• Support RMF and ATO lifecycle activities and continuous monitoring.
• Implement and document NIST SP 800-53 security controls.
• Develop and maintain SSPs, risk assessments, and POA&Ms.
• Review vulnerabilities and coordinate remediation actions.
• Maintain audit-ready security evidence across cloud and on-prem environments.
• Communicate risks and remediation status to stakeholders.

Skills

RMF

NIST SP 800-53

Vulnerability management

POA&Ms remediation

Continuous monitoring

Security control assessment

Technical writing

Communication

System authorization

Cloud security

Education

Bachelor's degree in Cybersecurity/Information Systems/Computer Science/Information Technology

Equivalent relevant education, training

Tools

Tenable/Nessus

Qualys

CSAM

Xacta

Archer

Okta

CyberArk

FedRAMP

Job description

About NDi

Network Designs, Inc. (NDi) is a leading Federal contractor that specializes in designing, developing, and delivering information technology and network solutions for government customers. Founded in 1985, NDi's firmly defined core values have driven all aspects of the business, which have been paramount to our company's success and the establishment of an enjoyable workplace atmosphere. At NDi, we believe that our people are the cornerstone of our success, and we value collaboration, career growth, and winning ideas. Military Veterans Encouraged to Apply.

Job Description

NDi is seeking an experienced Information System Security Officer (ISSO) to support cybersecurity, risk management, and system authorization activities within a large federal enterprise data and cloud environment.

This is a hands-on role supporting RMF/ATO, NIST security controls, vulnerability management, POA&M remediation, and continuous monitoring. The ISSO will work directly with system owners, engineers, architects, and cybersecurity stakeholders to identify security risks, develop practical remediation strategies, maintain authorization evidence, and drive security findings through closure.

The environment includes cloud-based enterprise data platforms supporting applications, analytics, data services, and emerging technologies.

Requirements

• U.S. Citizenship is required
• Must be able to obtain and maintain a Public Trust clearance
• This position is remote, candidate must reside in one of the following states: AL, AZ, DC, FL, GA, ID, MD, MS, NJ, NC, OK, OH, PA, SC, TN, TX, UT, VA, WV
• Occasional travel may be required. Candidates should be able to attend meetings at FAA facilities and other locations throughout the Continental United States (CONUS) as required.
• Must be available during Eastern Time (ET) business hours to support program needs and FAA coordination.

Qualifications and Experience

• Bachelor's degree in Cybersecurity, Information Systems, Computer Science, Information Technology, or a related field is preferred. Equivalent relevant education, training.
• Minimum of 4 years of experience in cybersecurity, information assurance, RMF, system authorization, vulnerability management, or related federal security work.
• Demonstrated experience supporting RMF and ATO&A activities.
• Working knowledge of NIST SP 800-53 and federal cybersecurity requirements.
• Hands-on experience managing and remediating POA&Ms.
• Experience analyzing vulnerability or security findings and coordinating corrective actions.
• Experience developing and maintaining security authorization documentation and evidence.
• Understanding of continuous monitoring, risk management, cloud security, and security control assessment.
• Strong technical writing, communication, and organizational skills.
• Ability to obtain and maintain required federal suitability.

Preferred Qualification & Skills

• Experience supporting FAA, DOT, or another federal civilian agency.
• Experience with FISMA High or other high-impact systems.
• Experience with AWS/AWS GovCloud or hybrid cloud environments.
• Experience with Tenable/Nessus, Qualys, CSAM, Xacta, Archer, or similar security/GRC platforms.
• Familiarity with Okta, CyberArk, FedRAMP, DevSecOps, or continuous ATO (cATO).
• Relevant certification such as Security+, CGRC, CISSP, CISM, or CCSP.

Preferred Technical Skills

• Experience with AWS/AWS GovCloud or hybrid cloud environments.
• Experience with Tenable/Nessus, Qualys, CSAM, Xacta, Archer, or similar security/GRC platforms.
• Familiarity with Okta, CyberArk, FedRAMP, DevSecOps, or continuous ATO (cATO).

Key Responsibilities

• Support systems throughout the NIST RMF and ATO lifecycle, including ongoing authorization and continuous monitoring.
• Implement, assess, and document NIST SP 800-53 security controls.
• Develop and maintain security authorization documentation, including SSPs, risk assessments, POA&Ms, control documentation, and assessment evidence.
• Review vulnerability scans and security findings, assess risk, and develop actionable remediation plans.
• Create and manage POA&Ms from identification through validated closure, coordinating remediation with system owners and engineering teams.
• Maintain current, traceable, audit-ready evidence supporting security controls and authorization.
• Evaluate system and configuration changes for security, control, and authorization impacts.
• Support security activities across AWS/cloud, application, infrastructure, and data environments.
• Support IAM/PAM, privacy, incident response, and security assessment activities as required.
• Communicate risks, remediation status, and security recommendations to technical and program stakeholders.

Compensation and Benefits

At NDi, we value our team and are committed to retaining top talent by offering competitive benefits and compensation packages. Our employee benefits package includes comprehensive health, dental, vision, pet, and legal insurance. Our corporate benefits include 401(k) retirement matching, paid leave, paid holidays, and health and wellness programs. In addition, we provide employer-paid life and disability insurance, professional development, education benefits, and much more to ensure our team has the resources they need to thrive on and off the job.

Veterans First Commitment

As a Service-Disabled Veteran-Owned Small Business (SDVOSB), NDi is dedicated to hiring veterans and providing a supportive work environment that honors their service while recognizing the unique skills and experiences they bring to our organization.

Our Commitment

Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, protected veteran status or other characteristics protected by law.