Information Systems Security Officer (ISSO)

Anakim Consulting; Ashburn (VA); On-site; USD 90,000 - 130,000; Full time

Job summary

Anakim Consulting is hiring Information Systems Security Officers (ISSO) for on-site roles in Ashburn, VA. You will manage security authorizations, controls, and RMF processes; develop essential documentation and coordinate assessments with internal teams and AOs.

Responsibilities include maintaining ATO packages, tracking POA&Ms, and guiding system owners on risk mitigation. DHS suitability and U.S. citizenship are required; roles vary by seniority.

Qualifications

• U.S. citizenship, no dual citizenship
• Current DHS CBP Suitability or eligibility to obtain secure access approval for DHS CBP EOD
• Availability to work on-site in Ashburn

Responsibilities

• Authorization and Compliance: Manage security authorization activities, maintain ATO packages, ensure compliance with NIST SP 800-53/800-37, FISMA, RMF
• Documentation Management: Develop, review, and maintain SSPs, SARs, SCTMs, and Contingency Plans
• Vulnerability and POA&M Management: Track, remediate findings, and manage POA&M items; assess deficiencies and propose risk mitigations
• Assessment Coordination: Coordinate security assessments and audits, work with stakeholders to resolve non-compliant findings
• Technical Guidance: Provide SME input on security policy interpretation, control implementation, and authorization strategies

Education

Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or related field

Certifications: CISSP, CISM, CAP/CISC, CISA; CompTIA Security+, CAP/CISC, GIAC Security Essentials (GSEC)

Job description

Information Systems Security Officer (ISSO)

Ashburn, VA 20147

Location: 100% On-Site

Security: DHS Suitability Public Trust

Multiple Openings!

Position Overview

Anakim Consulting is expanding our team supporting a large federal agency. Our Information Systems Security Officers (ISSO) manage security authorization activities and ensure continuous compliance for assigned enterprise and government information systems. This role is responsible for maintaining the security posture of systems throughout their lifecycle by managing security control implementation, developing authorization artifacts, and facilitating Risk Management Framework (RMF) processes in collaboration with System Owners, Security Assessors, and Authorizing Officials (AOs).

Key Responsibilities

• Authorization and Compliance: Manage security authorization activities, maintain Authority to Operate (ATO) packages, and ensure full compliance with federal, defense, or enterprise security standards (e.g., NIST SP 800-53, NIST SP 800-37, FISMA, RMF).
• Documentation Management: Develop, review, and maintain core system security documentation, including System Security Plans (SSPs), Security Assessment Reports (SARs), Security Control Traceability Matrices (SCTM), and Contingency Plans.
• Vulnerability and POA&M Management: Track, manage, and remediate security findings and Plan of Action and Milestones (POA&M) items. Evaluate control deficiencies and recommend risk-mitigating solutions.
• Assessment Coordination: Coordinate independent security assessments, third-party audits, and continuous monitoring activities. Collaborate with stakeholders to resolve non-compliant findings.
• Technical Guidance: Serve as a subject matter expert on security policy interpretation, control implementation, and system authorization strategies.

Requirements and Qualifications

• U.S. citizenship, no dual citizenship
• Current DHS CBP Suitability or eligibility to obtain secure access approval for DHS CBP EOD
• Availability to work on-site in Ashburn
• Education: Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or related field. Equivalent years of related experience may be considered in lieu of a degree.
• Certifications:
  • Junior: CompTIA Security+, CAP/CISC, GIAC Security Essentials (GSEC)
  • Mid/Senior: CISSP, CISM, CAP/CISC, CISA

Position level varies by role and related experience:

Junior ISSO (1-3 years)

• Supports security authorization activities and routine documentation updates.
• Assists in tracking POA&M items and compiling security assessment evidence.
• Monitors security control compliance under supervision.

Mid-Level ISSO (4-6 years)

• Independently manages authorization packages for assigned information systems.
• Coordinates end-to-end security assessments with internal and external assessors.
• Analyzes security control deficiencies and drafts robust remediation plans.

Senior ISSO (7-10 years)

• Oversees authorization strategies for complex, high-impact, or interconnected systems.
• Advises System Owners and executive leadership on complex compliance issues.
• Mentors junior/mid ISSOs and drives continuous monitoring program enhancements.

ISSO InformationSecurity RMF NIST80053 ATO POAM PublicTrust DHS AshburnVA GovCon CyberSecurityJobs Hiring NowHiring TechJobs ClearedJobs

Hours & Employment Type

Full-Time

Salary

This position offers a full-time W2 salary plus eligibility to participate in the company's benefits program.

About the Organization

Anakim Consulting is a privately held small company that provides growth opportunities for employees. Come join our team!

Equal Employment Opportunity Statement

Anakim Consulting provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state, or local laws.