Information Systems Security Officer (ISSO)

Appone; Ashburn (VA); On-site; USD 90,000 - 130,000; Full time

Job summary

Anakim Consulting is seeking Information Systems Security Officers (ISSO) to support a large federal agency in Ashburn, VA. These on-site roles focus on managing security authorization, RMF processes, and continuous compliance across systems throughout their lifecycles.

Senior and mid-level positions require experience with ATO packages, NIST standards, and security documentation; Junior roles support authorization activities and evidence collection. DHS Public Trust eligibility is required.

Qualifications

• Citizenship: U.S. citizen; no dual citizenship.
• DHS CBP suitability or eligibility for secure access.
• Availability to work on-site in Ashburn, VA.
• Education: Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or related field (equivalent experience allowed).
• Certifications: Junior – Security+, CAP/CISC, GSEC; Mid/Senior – CISSP, CISM, CAP/CISC, CISA.

Responsibilities

• Authorization and Compliance: Manage security authorization activities, maintain ATO packages, ensure compliance with federal/defense/enterprise standards (NIST SP 800-53, 800-37, FISMA, RMF).
• Documentation Management: Develop and maintain SSPs, SARs, SCTMs, and Contingency Plans.
• Vulnerability and POA&M Management: Track, remediate findings, and coordinate remediation milestones.
• Assessment Coordination: Coordinate security assessments and audits with internal and external assessors; resolve findings.
• Technical Guidance: Provide SME guidance on security policy, control implementation, and authorization strategies.

Skills

Security authorization

RMF processes

Documentation management

Vulnerability management

Stakeholder collaboration

Education

Bachelor's degree in cybersecurity

Equivalent years of related experience

Job description

Information Systems Security Officer (ISSO)

EOE Statement Anakim Consulting provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state, or local laws.

Description

Information Systems Security Officer (ISSO)

Ashburn, VA 20147

Location: 100% On-Site

Security: DHS Suitability Public Trust

Multiple Openings!

Position Overview

Anakim Consulting is expanding our team supporting a large federal agency. Our Information Systems Security Officers (ISSO) manage security authorization activities and ensure continuous compliance for assigned enterprise and government information systems. This role is responsible for maintaining the security posture of systems throughout their lifecycle by managing security control implementation, developing authorization artifacts, and facilitating Risk Management Framework (RMF) processes in collaboration with System Owners, Security Assessors, and Authorizing Officials (AOs).

Key Responsibilities

• Authorization and Compliance: Manage security authorization activities, maintain Authority to Operate (ATO) packages, and ensure full compliance with federal, defense, or enterprise security standards (e.g., NIST SP 800-53, NIST SP 800-37, FISMA, RMF).
• Documentation Management: Develop, review, and maintain core system security documentation, including System Security Plans (SSPs), Security Assessment Reports (SARs), Security Control Traceability Matrices (SCTM), and Contingency Plans.
• Vulnerability and POA&M Management: Track, manage, and remediate security findings and Plan of Action and Milestones (POA&M) items. Evaluate control deficiencies and recommend risk-mitigating solutions.
• Assessment Coordination: Coordinate independent security assessments, third-party audits, and continuous monitoring activities. Collaborate with stakeholders to resolve non-compliant findings.
• Technical Guidance: Serve as a subject matter expert on security policy interpretation, control implementation, and system authorization strategies.

Position Requirements

Requirements and Qualifications:

• U.S. citizenship, no dual citizenship
• Current DHS CBP Suitability or eligibility to obtain secure access approval for DHS CBP EOD
• Availability to work on-site in Ashburn
• Education: Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or related field. Equivalent years of related experience may be considered in lieu of a degree.
• Certifications:
  • Junior: CompTIA Security+, CAP/CISC, GIAC Security Essentials (GSEC)
  • Mid/Senior: CISSP, CISM, CAP/CISC, CISA

Position level varies by role and related experience:

Junior ISSO (1–3 years)

• Supports security authorization activities and routine documentation updates.
• Assists in tracking POA&M items and compiling security assessment evidence.
• Monitors security control compliance under supervision.

Mid-Level ISSO (4–6 years)

• Independently manages authorization packages for assigned information systems.
• Coordinates end-to-end security assessments with internal and external assessors.
• Analyzes security control deficiencies and drafts robust remediation plans.

Senior ISSO (7–10 years)

• Oversees authorization strategies for complex, high-impact, or interconnected systems.
• Advices System Owners and executive leadership on complex compliance issues.
• Mentors junior/mid ISSOs and drives continuous monitoring program enhancements.

#ISSO #InformationSecurity #RMF #NIST80053 #ATO #POAM #PublicTrust #DHS #AshburnVA #GovCon #CyberSecurityJobs #Hiring #NowHiring #TechJobs #ClearedJobs

Full-Time/Part-Time Full-Time

Salary Range This position offers a full-time W2 salary plus eligibility to participate in the company's benefits program.

Req Number INF-26-00040

About the Organization Anakim Consulting is a privately held small company that provides growth opportunities for employees. Come join our team!

This position is currently accepting applications.