Information Systems Security Officer (ISSO)

Anakim Consulting Incorporated; Ashburn (VA); On-site; USD 120,000 - 160,000; Full time

Job summary

Anakim Consulting Incorporated in Ashburn, VA is seeking Information Systems Security Officers (ISSO) to support a large federal agency. These roles require managing security authorization activities and maintaining ATO packages, ensuring compliance throughout lifecycle.

You will work with RMF processes, NIST SP 800-53/800-37, and collaborate with System Owners and AOs to implement controls and document plans. Positions are 100% on-site in Ashburn.

Qualifications

• Experience with security authorization activities and RMF processes is preferred.
• Familiarity with NIST SP 800-53 and 800-37 standards is a plus.
• Ability to develop and maintain security documentation and artifacts.

Responsibilities

• Authorization and Compliance: Manage security authorization activities, maintain Authority to Operate (ATO) packages, and ensure full compliance with federal, defense, or enterprise security standards (e.g., NIST SP 800-53, NIST SP 800-37, FISMA, RMF).
• Documentation Management: Develop, review, and maintain core system security documentation, including System Security Plans (SSPs), Security Assessment Reports (SARs), Security Control Traceability Matrices (SCTM), and Contingency Plans.
• Vulnerability and POA&M Management: Track, manage, and remediate security findings and Plan of Action and Milestones (POA&M) items. Evaluate control deficiencies and recommend risk-mitigating solutions.
• Assessment Coordination: Coordinate independent security assessments, third-party audits, and continuous monitoring activities. Collaborate with stakeholders to resolve non-compliant findings.
• Technical Guidance: Serve as a subject matter expert on security policy interpretation, control implementation, and system authorization strategies.

Job description

Information Systems Security Officer (ISSO)

Ashburn, VA 20147

Location: 100% On-Site

Security: DHS Suitability Public Trust

Multiple Openings!

Position Overview

Anakim Consulting is expanding our team supporting a large federal agency. Our Information Systems Security Officers (ISSO) manage security authorization activities and ensure continuous compliance for assigned enterprise and government information systems. This role is responsible for maintaining the security posture of systems throughout their lifecycle by managing security control implementation, developing authorization artifacts, and facilitating Risk Management Framework (RMF) processes in collaboration with System Owners, Security Assessors, and Authorizing Officials (AOs).

Key Responsibilities

• Authorization and Compliance: Manage security authorization activities, maintain Authority to Operate (ATO) packages, and ensure full compliance with federal, defense, or enterprise security standards (e.g., NIST SP 800-53, NIST SP 800-37, FISMA, RMF).
• Documentation Management: Develop, review, and maintain core system security documentation, including System Security Plans (SSPs), Security Assessment Reports (SARs), Security Control Traceability Matrices (SCTM), and Contingency Plans.
• Vulnerability and POA&M Management: Track, manage, and remediate security findings and Plan of Action and Milestones (POA&M) items. Evaluate control deficiencies and recommend risk-mitigating solutions.
• Assessment Coordination: Coordinate independent security assessments, third-party audits, and continuous monitoring activities. Collaborate with stakeholders to resolve non-compliant findings.
• Technical Guidance: Serve as a subject matter expert on security policy interpretation, control implementation, and system authorization strategies.