Information Systems Security Officer (ISSO)

Private Company, LLP; Arlington (VA); On-site; USD 190,000 - 230,000; Full time

Job summary

Private Company, LLP is seeking a Cybersecurity Lead with CISO potential to act as a hands-on builder, problem solver, and effective communicator. The role requires pivoting between risk mitigation, incident response, and driving compliance initiatives across federal requirements.

The position is on-site with five days in the Arlington office and eligibility for Top Secret clearance. You will collaborate with executives, guide secure architectures, and lead program teams to align security with

Qualifications

• Active TS/SCI clearance or ability to obtain.
• Bachelor’s degree or equivalent experience.
• 10+ years of progressive cybersecurity experience.
• Experience in a government contracting environment.
• Strong knowledge of NIST frameworks, RMF, and federal compliance requirements.
• Hands-on experience with network, cloud, and endpoint security.
• Ability to operate independently without direct reports, and execute the responsibilities with a hands-on approach.
• Excellent communication and stakeholder engagement skills.

Responsibilities

• Serve as the organization’s senior authority on cybersecurity and advise executive leadership on risk and strategy
• Develop, implement, and maintain enterprise-wide security policies, standards, and controls
• Ensure compliance with NIST 800-53, NIST 800-171, CMMC, CMMI, ISO 9K, ISO 20K, ISO 27K, RMF, and other federal requirements
• Manage Authority to Operate (ATO) processes and interface with auditors and assessors
• Conduct risk assessments, vulnerability analysis, and risk mitigation activities
• Oversee incident response planning and execution
• Review proposed system architectures to ensure "Security by Design"
• Guide secure architecture across network, cloud, and endpoint environments
• Collaborate with program teams and support security requirements for proposals

Skills

Hands-on security

Executive communication

Threat assessment

Stakeholder engagement

Education

Bachelor’s degree or equivalent experience

Tools

NIST RMF

ISO 27001

CMMC

Job description

We are hiring a Cybersecurity Lead with CISO Potential

The Cybersecurity Lead we're looking for is a builder, a problem solver, and an effective communicator who thrives as a hands-on practitioner. You'll need the ability to pivot as needed, identifying risks, developing mitigation strategies, and recommending solutions to executive leadership one day, then hardening systems, responding to incidents, reviewing technical configurations, and driving compliance initiatives the next.

This is a demanding, on-site role requiring five-day office presence and the ability to obtain a Top Secret clearance. If you can move seamlessly between the keyboard and the conference room, turning complex cybersecurity challenges into actionable business decisions, don't let this opportunity pass you by. If you're ready to take your ISSO experience to the next level, this role may be for you.

Key Responsibilities

• Serve as the organization’s senior authority on cybersecurity and advise executive leadership on risk and strategy
• Develop, implement, and maintain enterprise-wide security policies, standards, and controls
• Ensure compliance with NIST 800-53, NIST 800-171, CMMC, CMMI, ISO 9K, ISO 20K, ISO 27K, RMF, and other federal requirements
• Manage Authority to Operate (ATO) processes and interface with auditors and assessors
• Conduct risk assessments, vulnerability analysis, and risk mitigation activities
• Oversee incident response planning and execution
• Review proposed system architectures to ensure "Security by Design
• Guide secure architecture across network, cloud, and endpoint environments
• Collaborate with program teams and support security requirements for proposals

Required Qualifications

• Active TS/SCI clearance or ability to obtain
• Bachelor’s degree or equivalent experience
• 10+ years of progressive cybersecurity experience
• Experience in a government contracting environment
• Strong knowledge of NIST frameworks, RMF, and federal compliance requirements
• Hands-on experience with network, cloud, and endpoint security
• Ability to operate independently without direct reports, and execute the responsibilities with a hands-on approach
• Excellent communication and stakeholder engagement skills

Preferred Qualifications

• CISSP, CISM, or similar certification
• Familiarity with classified environments and SCIF operations