ISSO: Government-Grade InfoSec Leader & Cert Training

UNAVAILABLE; McLean (VA); On-site; USD 90,000 - 140,000; Full time

Job summary

Steampunk seeks an Information System Security Officer (ISSO) to support a government customer. You will manage security controls, perform assessments, and collaborate with privacy and governance divisions. Training toward CISSP/CASP/CISM/CEH/SSCP is available within the first six months.

You will monitor POA&Ms, assist in waivers, and coordinate audit readiness while ensuring RMF compliance and secure development practices across the system lifecycle.

Qualifications

• Two years of cybersecurity experience with one year of FISMA-related work
• Bachelor’s or Master’s degree in IT or four years cybersecurity experience with three years FISMA

Responsibilities

• Create, monitor, and update POA&Ms to ensure weaknesses are resolved by scheduled dates
• Create Waivers or Risk Acceptance Memos for effective risk management
• Support annual assessments per DHS guidance
• Review and update security authorization documents at least annually
• Coordinate with Privacy, Records, and Information Governance for compliance documentation
• Support Contingency Plan updates and tests
• Perform system self-assessments in Ongoing Authorization program
• Monitor and respond to ISVM/Patch management
• Provide audit support across multiple frameworks (FISMA, DHS, etc.)
• Maintain inventory knowledge within accreditation boundary
• Ensure security requirements are included in development cycles (Waterfall/Agile)
• Use DHS IA Compliance Tools
• Support planning of certifying and accrediting information systems
• Ensure Configuration Management prevents new security risks
• Respond to evolving requirements from legislation or policy
• Participate in DevOpsSec requirements for assigned systems

Skills

ISSO experience

FISMA knowledge

RMF & NIST 800-53

Vulnerability management

Windows/Linux networking

Audit support

DevOpsSec awareness

Communication skills

Education

Bachelor’s or Master’s in IT

Alternative: 4 years cybersecurity with 3 years FISMA

Tools

Jira

Confluence

Job description

Steampunk seeks an Information System Security Officer (ISSO) to support a government customer. You will manage security controls, perform assessments, and collaborate with privacy and governance divisions. Training toward CISSP/CASP/CISM/CEH/SSCP is available within the first six months.

You will monitor POA&Ms, assist in waivers, and coordinate audit readiness while ensuring RMF compliance and secure development practices across the system lifecycle.