Information Systems Security Officer (ISSO)

CGS Federal (Contact Government Services); Chicago (IL); On-site; USD 85,000 - 120,000; Full time

Job summary

A leading company seeks an experienced Information Systems Security Officer (ISSO) to support Department of Commerce systems and achieve Authorization to Operate (ATO). The role involves conducting security assessments, managing risk, and ensuring compliance with NIST standards. Ideal candidates will have a Bachelor's degree, relevant certifications, and strong technical writing skills.

Benefits

Health Insurance

Dental Insurance

Vision Insurance

Life Insurance

401k

Flexible Spending

Paid Time Off

Holidays

Qualifications

• At least 5 years of experience in ATO package development, security documentation, and compliance.
• Experience with eMASS and security certifications such as CCNA Security, CySA+, GICSP, GSEC, Security+ CE, SSCP or higher.

Responsibilities

• Conduct security assessments and oversight activities.
• Manage cybersecurity risks and maintain a risk registry.
• Support security authorization activities transitioning from DIACAP to RMF.
• Research, write, and finalize security assessments and policies.

Skills

Risk Management Framework (RMF)

NIST 800.53

Technical Writing

Cybersecurity Risk Management

Configuration Management

Vulnerability Scanning Tools

Education

Bachelor’s Degree

Master's Degree in Cybersecurity or related field

Job description

Information Systems Security Officer (ISSO)

CGS Federal (Contact Government Services) is seeking an experienced Information Systems Security Officer (ISSO) with expertise in DIACAP and/or RMF to support Department of Commerce systems and achieve Authorization to Operate (ATO). This full-time position is located at the Herbert Hoover building in Washington, DC, and involves full lifecycle Assessment and Authorization (A&A) management through all 6 steps of the RMF process, supporting the Government ISSM.

The role includes conducting security assessments, oversight activities in accordance with NIST 800.53, and supporting security documentation and compliance efforts.

Skills and Responsibilities:

• Review systems to identify potential security weaknesses and recommend improvements.
• Manage cybersecurity risks and maintain a risk registry for escalation.
• Provide security guidance using NIST RMF, DoC, and local policies.
• Recommend configuration management for security software, hardware, and firmware.
• Maintain compliance with vulnerability scanning tools like HBSS or ACAS and patch management systems.
• Support security authorization activities, including transitioning from DIACAP to RMF.
• Research, write, review, and finalize security assessments and policies.
• Conduct risk assessments and develop mitigation strategies.

Qualifications:

• Bachelor’s Degree and at least 5 years of experience in ATO package development, security documentation, and compliance.
• Experience with eMASS and security certifications such as CCNA Security, CySA+, GICSP, GSEC, Security+ CE, SSCP, or higher.
• Strong skills in Microsoft Word and Excel, with experience in technical writing.

Preferred:

• CISSP, CASP, or similar certification.
• Master's Degree in Cybersecurity or related field.
• Excellent organizational, analytical, and team collaboration skills.

Benefits:

Health, Dental, Vision, Life Insurance, 401k, Flexible Spending, Paid Time Off, Holidays.

CGS is an Equal Opportunity Employer and values diversity.

Join us in government innovation! For more info, visit https://cgsfederal.com or contact [e-mail].