Information System Security Officer (ISSO)

ELYON International; Washington (District of Columbia); On-site; USD 120,000 - 180,000; Full time

Benefits offered by this job

Paid sick leave

Medical/Dental (optional)

401 (k) Retirement Plan (optional)

Employer Paid Life Insurance

Employer Paid Short Term Disability

Optional Life Insurance

Job summary

ELYON International in Washington, DC seeks an experienced Information System Security Officer (ISSO) to provide cybersecurity, risk management, and information assurance support for a federal healthcare technology program.

The ISSO will work with system owners, security leadership, developers, and program stakeholders to ensure security controls are implemented and RMF processes followed throughout the system lifecycle, including A&A/ATO activities and continuous monitoring.

Qualifications

• Bachelor's degree in Cybersecurity, IT, CS, IS, or related field.
• 5+ years of cybersecurity or information assurance experience, including experience supporting federal information systems.
• Hands-on ISSO, information assurance, or security compliance responsibilities.
• Strong understanding of RMF and NIST SP 800-53.
• Experience supporting A&A/ATO processes.
• Experience developing and maintaining SSPs, POA&Ms, risk assessments, and security documentation.
• Ability to meet federal background investigation requirements.

Responsibilities

• Serve as an ISSO for assigned federal information systems and applications.
• Support implementation and ongoing assessment of security controls per federal requirements.
• Support RMF throughout the system development and operational lifecycle.
• Develop, maintain, and review system security documentation and authorization artifacts.
• Support A&A and ATO processes.
• Maintain and update SSPs, POA&Ms, risk assessments, and related security documentation.
• Track vulnerabilities, findings, remediation activities, and corrective actions.
• Coordinate vulnerability scanning and remediation activities with system admins, developers, engineers, and security teams.
• Support continuous monitoring and ongoing security authorization activities.
• Evaluate proposed system changes to identify security impacts.
• Assist owners and technical teams in implementing and documenting controls.
• Support security audits, assessments, and control validation.
• Monitor compliance with cybersecurity policies and standards.
• Conduct or support risk assessments and mitigation recommendations.
• Coordinate with incident response and cybersecurity teams when events or vulnerabilities are identified.
• Develop security status reports, metrics, and briefings for leadership.
• Promote security best practices across engineering, development, cloud, and operations teams.

Skills

ISSO

RMF

NIST 800-53

Information Assurance

Security Documentation

Vulnerability Management

Education

Bachelor's degree

Tools

GRC tools

Job description

Position Summary

We are seeking an experienced Information System Security Officer (ISSO) to provide cybersecurity, risk management, and information assurance support for a large-scale federal healthcare technology program.

The ISSO will work closely with system owners, security leadership, technical teams, developers, and program stakeholders to ensure information systems maintain appropriate security controls and comply with applicable federal cybersecurity requirements throughout the system lifecycle.

This role will support security authorization activities, continuous monitoring, risk assessments, vulnerability management, security documentation, and remediation efforts for complex enterprise systems.

Key Responsibilities

• Serve as an ISSO for assigned federal information systems and applications.
• Support implementation and ongoing assessment of security controls in accordance with applicable federal cybersecurity requirements.
• Support the Risk Management Framework (RMF) throughout the system development and operational lifecycle.
• Develop, maintain, and review system security documentation and authorization artifacts.
• Support Assessment and Authorization (A&A) and Authority to Operate (ATO)
• Maintain and update System Security Plans (SSPs), Plans of Action and Milestones (POA&Ms), risk assessments, and related security documentation.
• Track security vulnerabilities, findings, remediation activities, and corrective actions.
• Coordinate vulnerability scanning and remediation activities with system administrators, developers, engineers, and security teams.
• Support continuous monitoring and ongoing security authorization activities.
• Evaluate proposed system changes to identify potential security impacts.
• Assist system owners and technical teams in implementing and documenting security controls.
• Support security audits, assessments, and control validation activities.
• Monitor compliance with applicable cybersecurity policies and standards.
• Conduct or support security risk assessments and provide mitigation recommendations.
• Coordinate with incident response and cybersecurity teams when security events or vulnerabilities are identified.
• Develop security status reports, metrics, and briefings for program and security leadership.
• Promote security best practices across engineering, development, cloud, and operational teams.

Required Qualifications

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Information Systems, or a related discipline.
• 5+ years of cybersecurity or information assurance experience, including experience supporting federal information systems.
• Hands-on experience performing ISSO, information assurance, or security compliance responsibilities.
• Strong understanding of the NIST Risk Management Framework (RMF).
• Experience with NIST SP 800-53 security controls.
• Experience supporting A&A/ATO processes.
• Experience developing and maintaining SSPs, POA&Ms, risk assessments, and security authorization documentation.
• Knowledge of vulnerability management, security assessments, and continuous monitoring.
• Understanding of system development lifecycle and configuration/change management processes.
• Strong technical documentation and communication skills.
• Ability to collaborate effectively with technical teams, system owners, and program stakeholders.
• Ability to meet applicable federal background investigation requirements.

Preferred Qualifications

• Previous experience supporting federal healthcare, health IT, or other large federal technology environments.
• Experience with enterprise security governance, risk, and compliance programs.
• Experience using GRC/RMF tools and vulnerability management platforms.
• Background supporting cloud environments such as Microsoft Azure or AWS.
• Experience working with application development and DevSecOps teams.
• Experience supporting security audits and federal compliance assessments.
• Familiarity with healthcare information security and protection of sensitive health information.
• Preferred Certifications: CISSP, CAP / CGRC, CISM, CompTIA Security+, CASP+ / SecurityX or relevant cloud security certifications
• Disclaimer: This position is contingent upon ELYON’s receipt of contract award, Government acceptance of the proposed candidate, completion of required onboarding, and continued contract funding.**

Benefits

• Paid sick leave
• Medical/Dental (optional)
• 401 (k) Retirement Plan (optional)
• Employer Paid Life Insurance
• Employer Paid Short Term Disability
• Optional Life Insurance

ELYON International, Inc. is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.