ISSO Information Assurance/Security Specialist (Senior/SME)

Anakim Consulting; Ashburn (VA); Remote; USD 150,000 - 190,000; Full time

Job summary

Anakim Consulting is seeking an Information System Security Officer (ISSO) with Senior or SME expertise to lead RMF/ATO and continuous monitoring across major applications for a large federal agency. The role requires hands-on IT security, risk management, FedRAMP, and NIST expertise, advising System Owners and senior leadership on security posture.

Responsibilities include end-to-end RMF/ATO, cloud security assessments, vulnerability management, and CDM efforts.

Qualifications

• Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or related field; Master’s preferred.
• 10+ years of progressive IT security, information assurance, and risk management experience.
• DHS CBP Suitability or eligibility to obtain secure access for DHS CBP EOD.

Responsibilities

• Lead end-to-end RMF and ATO processes, preparing and maintaining security packages (SSP, RA, PTA, PIA, ST&E, POA&M).
• Develop, evaluate, and audit Cloud Service package documentation for FedRAMP and cloud integrations.
• Oversee vulnerability scans, analyze logs, and drive POA&M remediation.
• Support CDM initiatives and Zero Trust security architectures.
• Brief CISOs and senior stakeholders on security posture and risk mitigation.

Skills

Security leadership

Risk management

NIST RMF

Cloud security

Education

Bachelor's degree in CS/Cybersecurity/IT

Master's degree preferred

Tools

eMASS

Xacta

CSAM

RSA Archer

Splunk

Nessus

Job description

Title

ISSO Information Assurance/Security Specialist (Senior/SME)

EOE Statement

Anakim Consulting provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state, or local laws.

ISSO Information Assurance/Security Specialist (Senior/SME)

Security:

DHS Suitability Public Trust

Location:

Remote from Wash DC Metro area

Position Overview

Anakim Consulting is hiring an Information System Security Officer (ISSO) with Senior or SME level expertise to lead Authorization to Operate (ATO) and continuous monitoring activities across multiple major applications (MA) and general support systems (GSS) for a large federal agency. This position requires hands‑on experience in IT security, risk management, FedRAMP, and NIST standards. This individual will serve as a technical advisor to System Owners and senior leadership, directing security compliance, threat assessments, and cloud security initiatives.

Key Responsibilities include (but are not limited to):

• Authorization & Accreditation (A&A): Lead end-to-end Risk Management Framework (RMF) and ATO processes, preparing and maintaining comprehensive security packages (SSP, RA, PTA, PIA, ST&E, and POA&M) in compliance with NIST SP 800-53, SP 800-37, and FISMA standards.
• FedRAMP and Cloud Security: Develop, evaluate, and audit Cloud Service package documentation to ensure agency and FedRAMP compliance for cloud integrations.
• Vulnerability & Compliance Management: Oversee regular vulnerability scans (Qualys, Nessus, Nexpose, ACAS), analyze Splunk audit logs, evaluate system hardening (STIGs/SCAP), and drive POA&M remediation efforts.
• Continuous Diagnostics and Mitigation (CDM): Support and optimize CDM initiatives, automated security controls monitoring, and Zero Trust security architectures.
• Configuration and Impact Analysis: Serve on Change Control Boards (CCB) to review proposed system design changes, perform security impact analyses, and ensure baseline compliance.
• Leadership and Advisorship: Brief CISOs, System Owners, and senior stakeholders on overall system security posture, residual risk, and threat mitigation strategies.
• Other duties, as assigned.

Position Requirements

• U.S. citizenship, no dual citizenship
• Current DHS CBP Suitability or eligibility to obtain secure access approval for DHS CBP EOD
• 10+ years of progressive IT security, information assurance, and risk management experience, with a proven track record of leading system accreditations for federal agencies.
• Bachelor's degree in Computer Science, Cybersecurity Technology, Information Technology, or a related technical field (Master's degree preferred).

Certifications

• DoD 8570/8140 Requirement: Must possess a current baseline certification satisfying IAT/IAM Level III such as CISSP, CISM, GSLC, CCISO, CASP+, or equivalent.
• Advanced Certification Requirement: Must possess at least one advanced or specialized credential such as: CISM, CCISO, CISA, CISSP, CDPSE, CCSK.

Requirements Note: Candidates must hold a minimum of two distinct active certifications to meet both the baseline and advanced credential requirements. Single certifications cannot be used to satisfy both requirements.

Technical and Specialized Skills

• Frameworks and Standards: Expert-level knowledge of NIST SP 800-53 (Rev 4/5), NIST SP 800-37, FIPS 199/200, FISMA, FedRAMP, and NIST Cybersecurity Framework.
• Assessment and Authorization Tools: Hands-on expertise with federal repository and assessment tools such as eMASS, Xacta, CSAM, or RSA Archer.
• Security and Scan Tools: Experience with Splunk, Nessus, Qualys, Retina, IBM BigFix, and ticketing platforms (ServiceNow, Jira, Remedy).
• Technical Environment: Working knowledge of RedHat Enterprise Linux, Windows Server environments, networking concepts (LAN/WAN/VPN, firewalls), and cloud security baselines.

Communication: Exceptional verbal and written communication skills with demonstrated success briefing senior executive leadership and managing technical teams.

#CybersecurityJobs #ISSO #InformationSystemSecurityOfficer #GovConJobs #PublicTrust #DHS #FedRAMP #NIST #RMF #CISM #CISSP #CCISO #CDPSE #CCSK #DMVJobs #SpringfieldVA AshburnVA #VirginiaJobs #Cybersecurity #Hiring #JobOpening #InformationAssurance #ATO

Full-Time/Part-Time

Full-Time

Salary Range

This position offers a full time W2 salary plus eligibility to participate in the company's benefits program.

Req Number

INF-26-00036

About the Organization

Anakim Consulting is a privately held small company that provides growth opportunities for employees. Come join our team!

This position is currently accepting applications.