Information System Security Officer Lead

Agile Defense; Reston (VA); Hybrid; USD 145,000 - 165,000; Full time

Job summary

Agile Defense seeks an ISSO Lead to apply RMF and NIST 800-series standards to protect multi-tenant cloud and hybrid environments. You will translate technical gaps into executive risk narratives that inform risk-management decisions.

Responsibilities include managing security authorization (A&A, ATO), documenting processes, and guiding remediation efforts. Strong written and verbal communication is essential for diverse audiences and federal standards expertise.

Qualifications

• 8+ years in information security with 5+ years in a lead ISSO role on large USG programs.
• Strong RMF, NIST, FISMA experience and ability to craft remediation plans.
• Ability to present complex security gaps as clear executive risk narratives.

Responsibilities

• Lead security authorization processes (A&A and ATO) and develop related documentation.
• Analyze vulnerabilities, provide assessments, and produce remediation instructions.
• Communicate security findings clearly to diverse audiences and stakeholders.

Skills

Security leadership

Vulnerability analysis

Executive communication

Risk management

Education

Bachelor’s degree in computer science / engineering / STEM / IT / cybersecurity

Tools

GRC tools CSAM

FedRAMP knowledge

Job description

SUMMARY

Agile Defense is seeking an experienced ISSO Lead with expertise in applying the Risk Management Framework (RMF) and NIST 800-series standards to protect multi‑tenant cloud and hybrid‑enterprise environments. Adept at conducting deep‑dive vulnerability analyses and engineering remediation plans that satisfy rigorous FISMA requirements. Recognized for the ability to translate technical security gaps into clear, executive‑level narratives that facilitate informed risk‑management decisions.

JOB DUTIES AND RESPONSIBILITIES

The ISSO Lead must also have extensive experience with security authorization processes, such as Authorization/Certification & Accreditation (A&A) and Authorization to Operate (ATO), along with the ability to develop associated documentation. A strong understanding of current security tools, multi‑tenant cloud environments, hardware/software security implementation, communication protocols, and encryption techniques is essential. Furthermore, the role requires a proven ability to analyze security vulnerabilities, provide comprehensive assessments, and develop effective remediation instructions. Excellent written and verbal communication skills are paramount, enabling the ISSO Lead to present complex security information clearly and effectively to diverse audiences. This experience should be complemented by demonstrated expert knowledge of federal cybersecurity standards and best practices, including FISMA, NIST, and the Risk Management Framework (RMF) methodology.

QUALIFICATIONS

Required Certifications

• Active Certified Information Systems Security Professional (CISSP)
• Active Certified Information Security Manager (CISM)
• Other relevant certifications (e.g., CCSP, CEH) may be considered.

Education, Background, and Years of Experience

• Bachelor’s degree in computer science, engineering, STEM, information technology, or cybersecurity.

ADDITIONAL SKILLS & QUALIFICATIONS

Required Skills

• A minimum of 8 years of experience in information security, with at least 5 years specifically in a lead ISSO or similar leadership capacity on large complex USG programs.

Preferred Skills

• Active CISSP
• Active Project Management Professional (PMP) certification
• Active ISC2 Certified in Governance, Risk and Compliance (CGRC)
• Knowledge of FedRAMP
• Knowledge of A‑123 audit Experience and Expertise with GRC tools such as CSAM

WORKING CONDITIONS

Environmental Conditions

Hybrid role in Reston, VA

Strength Demands

Physical Requirements

$145,000 - $165,000 a year

Equal Opportunity Employer/Protected Veterans/Individuals with Disabilities