Information System Security Officer (ISSO)

Gunnison Consulting Group; Washington (District of Columbia); On-site; USD 120,000 - 130,000; Full time

Benefits offered by this job

Personal Leave

Paid Holidays

Flexible Time Off

401(k) Match

Health Insurance

Life and Disability Insurance

Public Transportation Subsidies

Training Allowance

Job summary

Gunnison Consulting Group in Washington, DC seeks a cybersecurity professional to lead RMF assessments, act as an ISSO, and manage ATO-ready artifacts. The role requires deep knowledge of NIST RMF, vulnerability management, and reporting in SAR/POA&M formats.

On-site work five days a week; active Public Trust or higher is preferred. You will collaborate with federal clients, perform risk analyses, monitor security events, and contribute to incident response efforts while supporting continuous

Qualifications

• 5+ years of experience in Cybersecurity Assessments / RMF.
• Experience acting as an ISSO.
• Hands-on experience with vulnerability scanning tools (Tenable Nessus).
• Writing SARs and POA&M.
• Strong knowledge of the NIST RMF and evaluating system configurations.
• CISSP (or Govt-accepted equivalents like CISM, CASP+, or GIAC series).
• Bachelor’s degree in Computer Science, Cybersecurity, IT, or related field.

Responsibilities

• Conduct security control assessments and ensure compliance with federal requirements (NIST, FISMA).
• Perform risk/vulnerability analyses.
• Maintain ATO-ready artifacts (SSPs, SAPs, SARs, POA&M). Monitor security events and assist with incident response mitigation.

Skills

Cybersecurity assessments / RMF

ISSO experience

NIST RMF knowledge

CISSP or govt equivalents

Education

Bachelor’s degree in Computer Science, Cybersecurity, IT, or related field

Tools

Tenable Nessus

GRC tools (eMASS, CSAM)

Job description

Description

*This position is contingent upon a future opening with Gunnison.

Salary: $120,000 - $130,000/year

Work Location: On-site 5 days per week, Washington, DC.

• Conduct security control assessments and ensure compliance with federal requirements (NIST, FISMA).
• Perform risk/vulnerability analyses.
• Maintain ATO-ready artifacts (SSPs, SAPs, SARs, POA&M). Monitor security events and assist with incident response mitigation.

Requirements

• 5+ years of experience in Cybersecurity Assessments / RMF.
• Experience acting as an ISSO.
• Hands-on experience with vulnerability scanning tools (e.g., Tenable Nessus).
• Writing technical assessment reports (SARs) and POA&M.
• Strong knowledge of the NIST RMF and evaluating system configurations.
• CISSP (or Govt-accepted equivalents like CISM, CASP+, or GIAC series).
• Bachelor’s degree in Computer Science, Cybersecurity, IT, or related field.

Clearance Requirement: Public Trust or higher active clearance with the ability to obtain a Secret Clearance.

Desired Qualifications

• 7+ years of work experience.
• Experience acting as an ISSO for classified systems.
• Familiarity with specific GRC tools (eMASS, CSAM).
• NTIA or Commerce experience.
• Experience developing automated compliance dashboards.
• Federal audit response experience (OIG/GAO).
• CISA, CRISC, or CEH
• Additional certifications or advanced degrees in IT, project management, or data management fields
• Active Secret Clearance

The salary range for this position depends upon multiple factors including location, the individual's knowledge, skills, competencies, and experience, and contract-specific budget constraints and organizational requirements.

Gunnison Consulting Group's total compensation package also includes bonus and profit-sharing opportunities, depending on company and employee performance. Available employee benefits include:

• 3 weeks of Personal Leave your first year
• 11 paid Holidays each year
• 5 days of Flexible Time Off each year
• 401(k) company match at 50% up to 10% of your salary
• Medical, Dental and Vision Insurance
• Life and Disability Insurance
• Public Transportation Subsidies
• Certifications and Training Allowance - Up to $5,000/year!

Why Join Gunnison?

• Gunnison takes on ambitious projects. We target fun, challenging work that requires creative thinking and innovation.
• Quality is our top priority.
• Gunnison employee benefits meet or exceed what other companies in the Washington, D.C. metropolitan area offer.
• There is a great sense of camaraderie at Gunnison. This is an atmosphere we will maintain as we continue to grow.
• We are growing rapidly and the opportunity for individual professional growth with Gunnison is outstanding.
• We hire for careers at Gunnison, not to fill a position.

Equal Opportunity Employer. Must be eligible for employment in the United States. We are unable to sponsor candidates at this time.

In 1994 Gunnison began serving the greater Washington, D.C. metro area, focused on tackling our customers' most ambitious technology projects. By creating a culture dedicated to enabling our customers and employees to achieve more than they ever thought they could, the company has thrived for over 25 years.