Information Systems Security Officer

Zohorecruit; United States; Remote; USD 110,000 - 165,000; Full time

Job summary

Joseph & Associates, LLC is seeking an Information Security Officer (ISSO) to provide enterprise cybersecurity, risk management, and compliance support for Health IT systems. The role advises on ATO packages, risk assessments, and continuous monitoring, aligning with DHS, ICE, and federal requirements.

The ISSO will guide governance and authorization activities, coordinate with program managers and technical teams, and ensure security controls are integrated across modernization efforts.

Qualifications

• Working knowledge of federal information security regulations and compliance requirements.
• Ability to communicate technical cybersecurity concepts clearly to technical and non-technical audiences.
• Minimum 3–5 years of experience supporting cybersecurity or IT security programs.

Responsibilities

• Assist in planning, execution, and oversight of cybersecurity risk management activities, including system security planning and security control assessments.
• Coordinate and support ATO efforts, including development, review, tracking, and maintenance of authorization documentation and artifacts.
• Monitor compliance activities and support vulnerability management, remediation tracking, and continuous monitoring initiatives.
• Provide cybersecurity recommendations and validation support during system development, integration, modernization, and enhancement efforts.
• Work closely with program managers, system owners, technical teams, and stakeholders to ensure security requirements are addressed.
• Support incident response coordination, security reporting, and risk communication activities.
• Promote compliance with federal cybersecurity laws, regulations, and frameworks such as NIST, FISMA, DHS, and ICE requirements.
• Maintain security-related documentation including risk registers, POA&Ms, audit evidence, and assessment records.
• Provide leadership with analysis of cybersecurity risks, threats, and mitigations.

Skills

Federal regs

RMF/C&A

Continuous monitoring

Security authorization

Stakeholder communication

Job description

We are looking for a candidate to provide enterprise cybersecurity, risk management, and compliance support for IHSC Health IT systems and initiatives. This position serves as a key advisor in establishing and maintaining Authority to Operate (ATO) packages for multiple systems while helping ensure compliance with DHS, ICE, and federal cybersecurity requirements. The Information Systems Security Officer (ISSO) supports security governance, authorization activities, risk assessments, and continuous monitoring efforts across the Health IT environment. This role functions in an advisory and oversight capacity, providing guidance, coordination, and compliance validation without performing system administration, configuration, implementation, or operational control activities.

Key Responsibilities:

• Assist in the planning, execution, and oversight of cybersecurity risk management activities, including system security planning and security control assessments.
  
• Coordinate and support ATO efforts, including the development, review, tracking, and maintenance of authorization documentation and artifacts.
  
• Monitor compliance activities and support vulnerability management, remediation tracking, and continuous monitoring initiatives.
  
• Provide cybersecurity recommendations and validation support during system development, integration, modernization, and enhancement efforts.
  
• Work closely with program managers, system owners, technical teams, and stakeholders to ensure security requirements are effectively addressed.
  
• Support incident response coordination, security reporting, and risk communication activities.
  
• Promote compliance with applicable federal cybersecurity laws, regulations, and frameworks, including NIST, FISMA, DHS, and ICE security requirements.
  
• Maintain security-related documentation, including risk registers, Plans of Action and Milestones (POA&Ms), audit evidence, and assessment records.
  
• Provide leadership with analysis of cybersecurity risks, emerging threats, and recommended mitigation strategies.
  

Requirements

• Working knowledge of federal information security regulations, cybersecurity frameworks, and compliance requirements.
  
• Experience supporting security and compliance initiatives within federal government or highly regulated IT environments.
  
• Strong understanding of risk management frameworks, security authorization processes, and continuous monitoring programs.
  
• Ability to communicate technical cybersecurity concepts clearly to both technical and non-technical audiences.
  
• Excellent organizational, coordination, and technical documentation skills.
  
• Minimum of three (3) to five (5) years of experience supporting cybersecurity, information assurance, or IT security programs.
  
• Professional cybersecurity certification such as CISSP, CISM, CAP, Security+, or an equivalent credential is preferred.