Information System Security Officer (ISSO) #1899271

Network Designs Inc.; United States; Remote; USD 110,000 - 170,000; Full time

Benefits offered by this job

Health insurance

401(k) retirement matching

Paid leave

Job summary

Network Designs, Inc. (NDi) seeks an experienced Information System Security Officer (ISSO) to support cybersecurity, RMF/ATO, and risk management within a large federal data and cloud environment.

This is a hands-on role collaborating with system owners, engineers, architects, and cybersecurity stakeholders to identify security risks, develop practical remediation strategies, maintain authorization evidence, and drive security findings through closure.

Qualifications

• Bachelor's degree in Cybersecurity, Information Systems, Computer Science, Information Technology, or a related field preferred.
• Minimum of 4 years of experience in cybersecurity, information assurance, RMF, system authorization, vulnerability management, or related federal security work.
• Experience supporting RMF and ATO/A&A activities.
• Working knowledge of NIST SP 800-53 and federal cybersecurity requirements.
• Hands-on experience managing and remediating POA&Ms.
• Experience analyzing vulnerability or security findings and coordinating corrective actions.
• Experience developing and maintaining security authorization documentation and evidence.
• Understanding of continuous monitoring, risk management, cloud security, and security control assessment.
• Strong technical writing, communication, and organizational skills.
• Ability to obtain and maintain required federal suitability.

Responsibilities

• Support systems throughout the NIST RMF and ATO lifecycle, including ongoing authorization and continuous monitoring.
• Implement, assess, and document NIST SP 800-53 security controls.
• Develop and maintain security authorization documentation, including SSPs, risk assessments, POA&Ms, control documentation, and assessment evidence.
• Review vulnerability scans and security findings, assess risk, and develop actionable remediation plans.
• Create and manage POA&Ms from identification through validated closure, coordinating remediation with system owners and engineering teams.
• Maintain current, traceable, audit-ready evidence supporting security controls and authorization.
• Evaluate system and configuration changes for security, control, and authorization impacts.
• Support security activities across AWS/cloud, application, infrastructure, and data environments.
• Support IAM/PAM, privacy, incident response, and security assessment activities as required.
• Communicate risks, remediation status, and security recommendations to technical and program stakeholders.

Skills

RMF

NIST SP 800-53

Security documentation

Writing & communication

Continuous monitoring

Education

Bachelor's degree in Cybersecurity / Information Systems / Computer Science / Information Technology or related field

Tools

Tenable/Nessus

Qualys

CSAM

Xacta

Archer

Okta

CyberArk

Job description

About NDi:

Network Designs, Inc. (NDi) is a leading Federal contractor that specializes in designing, developing, and delivering information technology and network solutions for government customers. Founded in 1985, NDi's firmly defined core values have driven all aspects of the business, which have been paramount to our company's success and the establishment of an enjoyable workplace atmosphere. At NDi, we believe that our people are the cornerstone of our success, and we value collaboration, career growth, and winning ideas. Military Veterans Encouraged to Apply.

Job Description:

NDi is seeking an experienced Information System Security Officer (ISSO) to support cybersecurity, risk management, and system authorization activities within a large federal enterprise data and cloud environment. This is a hands-on role supporting RMF/ATO, NIST security controls, vulnerability management, POA&M remediation, and continuous monitoring. The ISSO will work directly with system owners, engineers, architects, and cybersecurity stakeholders to identify security risks, develop practical remediation strategies, maintain authorization evidence, and drive security findings through closure. The environment includes cloud-based enterprise data platforms supporting applications, analytics, data services, and emerging technologies.

Requirements:

• U.S. Citizenship is required
• Must be able to obtain and maintain a Public Trust clearance
• This position is remote, candidate must reside in one of the following states: AL, AZ, DC, FL, GA, ID, MD, MS, NJ, NC, OK, OH, PA, SC, TN, TX, UT, VA, WV
• Occasional travel may be required. Candidates should be able to attend meetings at FAA facilities and other locations throughout the Continental United States (CONUS) as required.
• Must be available during Eastern Time (ET) business hours to support program needs and FAA coordination.

Qualifications and Experience:

• Bachelor's degree in Cybersecurity, Information Systems, Computer Science, Information Technology, or a related field is preferred. Equivalent relevant education, training.
• Minimum of 4 years of experience in cybersecurity, information assurance, RMF, system authorization, vulnerability management, or related federal security work.
• Demonstrated experience supporting RMF and ATO/A&A activities.
• Working knowledge of NIST SP 800-53 and federal cybersecurity requirements.
• Hands-on experience managing and remediating POA&Ms.
• Experience analyzing vulnerability or security findings and coordinating corrective actions.
• Experience developing and maintaining security authorization documentation and evidence.
• Understanding of continuous monitoring, risk management, cloud security, and security control assessment.
• Strong technical writing, communication, and organizational skills.
• Ability to obtain and maintain required federal suitability.

Preferred Qualification & Skills:

• Experience supporting FAA, DOT, or another federal civilian agency.
• Experience with FISMA High or other high-impact systems.
• Experience with AWS/AWS GovCloud or hybrid cloud environments.
• Experience with Tenable/Nessus, Qualys, CSAM, Xacta, Archer, or similar security/GRC platforms.
• Familiarity with Okta, CyberArk, FedRAMP, DevSecOps, or continuous ATO (cATO).
• Relevant certification such as Security+, CGRC, CISSP, CISM, or CCSP.

Preferred Technical Skills:

• Experience with AWS/AWS GovCloud or hybrid cloud environments.
• Experience with Tenable/Nessus, Qualys, CSAM, Xacta, Archer, or similar security/GRC platforms.
• Familiarity with Okta, CyberArk, FedRAMP, DevSecOps, or continuous ATO (cATO).

Key Responsibilities:

• Support systems throughout the NIST RMF and ATO lifecycle, including ongoing authorization and continuous monitoring.
• Implement, assess, and document NIST SP 800-53 security controls.
• Develop and maintain security authorization documentation, including SSPs, risk assessments, POA&Ms, control documentation, and assessment evidence.
• Review vulnerability scans and security findings, assess risk, and develop actionable remediation plans.
• Create and manage POA&Ms from identification through validated closure, coordinating remediation with system owners and engineering teams.
• Maintain current, traceable, audit-ready evidence supporting security controls and authorization.
• Evaluate system and configuration changes for security, control, and authorization impacts.
• Support security activities across AWS/cloud, application, infrastructure, and data environments.
• Support IAM/PAM, privacy, incident response, and security assessment activities as required.
• Communicate risks, remediation status, and security recommendations to technical and program stakeholders.

Compensation and Benefits:

At NDi, we value our team and are committed to retaining top talent by offering competitive benefits and compensation packages. Our employee benefits package includes comprehensive health, dental, vision, pet, and legal insurance. Our corporate benefits include 401(k) retirement matching, paid leave, paid holidays, and health and wellness programs. In addition, we provide employer-paid life and disability insurance, professional development, education benefits, and much more to ensure our team has the resources they need to thrive on and off the job.

Veterans First Commitment:

As a Service-Disabled Veteran-Owned Small Business (SDVOSB), NDi is dedicated to hiring veterans and providing a supportive work environment that honors their service while recognizing the unique skills and experiences they bring to our organization.

Our Commitment:

Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, protected veteran status or other characteristics protected by law.