Information System Security Officer (ISSO)

Illumination Works LLC.; Northern (KY); Hybrid; USD 110,000 - 160,000; Full time

Job summary

Illumination Works LLC is seeking an experienced Information System Security Officer (ISSO) to support RMF compliance, ATO activities, and continuous monitoring across cloud environments. The role involves developing RMF documentation, coordinating with government stakeholders, and ensuring secure data handling for finance-related systems.

Qualifications include active Secret Clearance, 5+ years in information security, NIST RMF expertise, and cloud security experience.

Qualifications

• Must hold active Secret Clearance
• Experience with DoD RMF processes, especially FM systems, including FISCAM audits, FM control implementation, POA&M management, and ATO support
• Experience supporting FISCAM, FIAR, or other Federal audit activities
• Knowledge of NIST 800-53 security controls and continuous monitoring practices
• Experience performing security assessments and validating system compliance
• Familiarity with vulnerability management tools (ACAS, Tenable, or similar)
• Understanding of cloud security principles (AWS/Azure, GovCloud, or similar)
• Experience using RMF documentation tools and maintaining SSPs, POA&Ms, and assessment artifacts
• Strong documentation skills for RMF artifacts and compliance reporting
• Ability to work across engineering, architecture, and cybersecurity teams
• Excellent interpersonal skills
• Security+ certification or equivalent
• 5+ years in information system security or related roles
• Ability to pass background screening and drug testing

Responsibilities

• Support RMF and ATO activities across cloud and on-prem environments
• Develop and maintain RMF documentation (SSPs, POA&Ms, artifacts)
• Support continuous monitoring and audit readiness
• Prepare documentation for government cybersecurity and financial audits
• Evaluate and validate security controls in systems, apps, and integrations
• Support incident response activities and remediation of findings
• Collaborate with cybersecurity, engineering, and architecture teams

Skills

RMF

NIST 800-53

Analytical

Interpersonal skills

Collaboration across teams

Security policy

Documentation

Education

Bachelor’s degree in Computer Science, Cybersecurity, or related discipline

Tools

eMASS

ACAS

Tenable

Job description

If you are unable to complete this application due to a disability, contact this employer to ask for an accommodation or an alternative application process.

Information System Security Officer (ISSO)

US

7 days ago Requisition ID: 1211

Location: Remote

We are seeking an experienced Information System Security Officer (ISSO) to support implementing and maintaining the cybersecurity posture of mission-critical finance-related systems. This role is responsible for supporting Risk Management Framework (RMF) compliance, Authority to Operate (ATO) activities, continuous monitoring, cybersecurity audit readiness, and security compliance across enterprise data environments. The successful candidate will work closely with cybersecurity, engineering, system architecture, and Government stakeholders to implement and maintain security controls in a cloud environment while supporting recurring FISCAM, NIST, RMF, and financial management security compliance activities.

The key responsibilities of the Information System Security Officer (ISSO)include:

• Support implementation and enforcement of cybersecurity policies and controls in accordance with DoD RMF, NIST 800-53, and Air Force guidance
• Support security compliance activities for enterprise financial data and system integrations via implementing and maintaining RMF Financial Management (FM) Overlay security controls
• Support ATO lifecycle activities, including control implementation, validation, and continuous monitoring
• Develop, maintain, and update RMF documentation, including System Security Plans (SSPs), POA&Ms, security control implementation evidence, assessment artifacts, and other ATO and FISCAM audit readiness documentation
• Support recurring Government cybersecurity and financial audits by preparing documentation, responding to auditor requests, and participating in technical walkthroughs
• Evaluate and validate security controls for systems, applications, and integrations, including cloud and API-based architectures
• Support incident response activities, including detection, reporting, and coordination with cybersecurity teams
• Track, document, and support remediation of security findings through Corrective Action Plans (CAPs)
• Provide support to the Information System Security Manager (ISSM) for maintaining the appropriate operational IA posture for a system/program/enclave

Do you have what it takes?Are you driven to implement creative solutions that unravel complex and ever-changing challenges? We value passion, curiosity, and perseverance with an ability to communicate ideas and results to diverse audiences. We look for people who thrive in collaborative and independent assignments, have the aptitude to learn new data quickly, and who are willing to mentor junior team members.

Required Qualifications:

• Must hold active Secret Clearance
• Experience with DoD RMF processes, especially for FM systems, including preparing for FISCAM audits, FM control implementation, POA&M management, and ATO support
• Experience supporting FISCAM, FIAR, or other Federal audit activities
• Knowledge of NIST 800-53 security controls and continuous monitoring practices
• Experience performing security assessments and validating system compliance
• Familiarity with vulnerability management tools (e.g., ACAS, Tenable, or similar)
• Experience using eMASS to manage RMF packages and security documentation
• Understanding of cloud security principles (AWS/Azure, GovCloud, or similar environments)
• Experience proposing, coordinating, implementing, and enforcing information systems security policies, standards, and methodologies, preferably on a large software or IT program
• Experience securing enterprise data integrations, APIs, or system interfaces
• Strong documentation skills, particularly for RMF artifacts (e.g., SSP) and compliance reporting
• Strong analytical, problem-solving, and organizational skills
• Ability to work collaboratively across engineering, architecture, and cybersecurity teams
• Must have excellent interpersonal skills
• Security+ certification required (or higher DoD 8570/8140 equivalent)
• 5+ years of experience in information system security, cybersecurity, or related roles
• Bachelor’s degree in Computer Science, Cybersecurity, or comparable academic discipline
• Ability to pass required background screening and drug testing

About ILW

At Illumination Works, we know data, and we should, we’ve been doing it since we started in 2006! We specialize in everything data from big data to data science, data engineering, software engineering, and cloud design. We are a trusted technology partner in user-centered digital transformation—delivering impactful business results to clients. We partner with customers to solve their unique technology and data challenges and stay on top of modern technologies and advancements leveraging our Innovation Lab. Check out our website to learn more at www.ilwllc.com .

Why choose us?We invest in our employees in all aspects of their life and we value family. We offer market-competitive salary, a generous PTO package, and comprehensive medical, dental, vision and life insurance plans. We also offer 401K, short/long-term disability insurance, a fun and engaging culture, and training opportunities to keep you up to speed on the latest technologies.

Commitment to Non-Discrimination

All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran, or any other status protected by applicable federal, state, local, or international law.

Accommodations
If you are an individual with a disability and would like to request a reasonable workplace accommodation for any part of our employment process, please contact the Human Resources Staff by sending an email to [e-mail] .This option is reserved only for individuals who are requesting a reasonable workplace accommodation. It is not intended for other purposes or inquiries.

Notification for current or previously cleared professionals:

Official U.S. Government information appearing in the public domain shall not automatically be considered UNCLASSIFIED or approved for public release. ILW recognizes that information contained in resumes of current or previously cleared professionals may be sensitive, containing potentially proprietary and/or protected information. Protected Information is considered classified, in the process of a classification determination, or unclassified, but protected by statute. Therefore, all resumes should be approved for public release by a U.S. Government Official with Original Classification Authority, prior to posting the resume to ILW’s applicant tracking system.

By submitting my resume, I understand that I am NOT authorized to upload content with Official U.S. Government information that is considered, sensitive, proprietary, or protected.