ISSO: Cyber Risk & Compliance Governance Lead

Zohorecruit; United States; Remote; USD 110,000 - 165,000; Full time

Job summary

Joseph & Associates, LLC is seeking an Information Security Officer (ISSO) to provide enterprise cybersecurity, risk management, and compliance support for Health IT systems. The role advises on ATO packages, risk assessments, and continuous monitoring, aligning with DHS, ICE, and federal requirements.

The ISSO will guide governance and authorization activities, coordinate with program managers and technical teams, and ensure security controls are integrated across modernization efforts.

Qualifications

• Working knowledge of federal information security regulations and compliance requirements.
• Ability to communicate technical cybersecurity concepts clearly to technical and non-technical audiences.
• Minimum 3–5 years of experience supporting cybersecurity or IT security programs.

Responsibilities

• Assist in planning, execution, and oversight of cybersecurity risk management activities, including system security planning and security control assessments.
• Coordinate and support ATO efforts, including development, review, tracking, and maintenance of authorization documentation and artifacts.
• Monitor compliance activities and support vulnerability management, remediation tracking, and continuous monitoring initiatives.
• Provide cybersecurity recommendations and validation support during system development, integration, modernization, and enhancement efforts.
• Work closely with program managers, system owners, technical teams, and stakeholders to ensure security requirements are addressed.
• Support incident response coordination, security reporting, and risk communication activities.
• Promote compliance with federal cybersecurity laws, regulations, and frameworks such as NIST, FISMA, DHS, and ICE requirements.
• Maintain security-related documentation including risk registers, POA&Ms, audit evidence, and assessment records.
• Provide leadership with analysis of cybersecurity risks, threats, and mitigations.

Skills

Federal regs

RMF/C&A

Continuous monitoring

Security authorization

Stakeholder communication

Job description

Joseph & Associates, LLC is seeking an Information Security Officer (ISSO) to provide enterprise cybersecurity, risk management, and compliance support for Health IT systems. The role advises on ATO packages, risk assessments, and continuous monitoring, aligning with DHS, ICE, and federal requirements.

The ISSO will guide governance and authorization activities, coordinate with program managers and technical teams, and ensure security controls are integrated across modernization efforts.