Information System Security Officer (ISSO)

MicroHealth LLC; Vienna (VA); Remote; USD 130,000 - 150,000; Full time

Job summary

MicroHealth is seeking an experienced Information System Security Officer to join their remote cybersecurity team. This position involves ensuring the security and compliance of information systems, with key responsibilities including developing security policies, overseeing ATO processes, and conducting security assessments. Ideal candidates will have over 12 years of cybersecurity experience and relevant certifications.

Qualifications

• Minimum 12+ years of experience in Cybersecurity.
• Proven experience with Authorization to Operate (ATO) processes.
• Ability to maintain federal security standards.

Responsibilities

• Develop, implement, and maintain information system security policies and procedures.
• Conduct security assessments and risk analyses for information systems.
• Ensure compliance with federal security standards and regulations.

Skills

Cybersecurity

Agile Development

Education

Bachelor’s degree in computer science, Cybersecurity, Information Technology, or related field

Master's degree

Tools

IAT Level III certification

CISSP

CISA

Job description

MicroHealth is seeking an experienced Information System Security Officer (ISSO) to join our cybersecurity team in a remote capacity. The successful candidate will be responsible for ensuring the security and compliance of information systems while working in an Agile environment.

Location:Remote

Salary: $130,000-$150,000

Required Qualifications:

• Minimum 12+ years of experience in Cybersecurity
• Proven experience with Authorization to Operate (ATO) processes
• Demonstrated experience working in Agile development environments
  
  

Education

• Minimum:Bachelor’s degree in computer science, Cybersecurity, Information Technology, or related field
• Preferred:Master's degree
  
  

Certifications

• Required:IAT Level III certification
• Required:CISSP (Certified Information Systems Security Professional) or CISA (Certified Information Systems Auditor)
  
  

Additional Preferred Certifications

• CISM (Certified Information Security Manager)
• CRISC (Certified in Risk and Information Systems Control)
  
  

Security Clearance

• Must be able to obtain and maintain a background investigation clearance (e.g., Public Trust)
• Note: We cannot sponsor or hold existing clearances; Public Trust requirements are agency-specific
  
  

Key Responsibilities

• Develop, implement, and maintain information system security policies and procedures
• Conduct security assessments and risk analyses for information systems
• Manage and oversee ATO processes and documentation
• Ensure compliance with federal security standards and regulations (NIST, FISMA, etc.)
• Collaborate with development teams in Agile environments to integrate security practices
• Monitor and respond to security incidents and vulnerabilities
• Prepare and maintain security documentation, including System Security Plans (SSP)
• Coordinate with auditors and regulatory bodies during compliance reviews
• Provide security guidance and training to technical teams
• Implement and maintain continuous monitoring programs
• Assess and approve security controls for information systems
• Support incident response and forensic activities as needed
  
  

Additional ISSO Responsibilities

• Perform security control assessments and validation testing
• Develop and maintain security metrics and reporting dashboards
• Coordinate vulnerability management and remediation efforts
• Review and approve system interconnection agreements
• Conduct security awareness training and briefings
• Participate in change control boards and security architecture reviews
• Maintain relationships with external security vendors and service providers
• Support business continuity and disaster recovery planning
• Ensure proper handling and protection of sensitive data
• Stay current with emerging cybersecurity threats and technologies
  
  

Physical Demands:

While performing the duties of this job, the employee is regularly required to sit. The employee frequently is required to walk; use hands to finger, handle or feel; reach with hands and arms; and talk or hear. The employee is occasionally required to stand. The employee may lift or move objects up to 5 pounds. Specific vision abilities required by this job include close vision, distance vision, color vision, and the ability to adjust focus.

MicroHealth will recruit, hire, train, and promote persons in all job titles, and ensure that all other personnel actions are administered without regard to race, color, religion, sex, sexual orientation, gender identity, genetic information, national origin, disability, or status as a protected veteran and ensure that all employment decisions are based only on valid job requirements.

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.

If you need reasonable accommodation due to a disability for any part of the employment process, please send an e-mail to [e-mail] with your request and contact information.

Powered by JazzHR

ynxfjfZlFC