ISSO / Security Compliance Analyst

chameleonintegratedservices; Washington (District of Columbia); On-site; USD 90,000 - 130,000; Full time

Benefits offered by this job

Health insurance

Vision plan

401K plan

Life insurance

Disability insurance

Training allowance

PTO

Job summary

Chameleon Integrated Services in Washington, DC seeks an experienced ISSO/Security Compliance Analyst to provide system-level support under the Lead and Senior ISSOs, maintain security records, validate evidence, and coordinate with system owners and technical teams.

Qualified candidates have 4+ years in cybersecurity or IA, 2+ years with federal systems, and proficiency with NIST SP 800-37/800-53, SSPs, POA&Ms, continuous monitoring, and at least one GRC platform (CSAM, eMASS, Xacta, Archer or

Qualifications

• At least 4 years of cybersecurity, information assurance, compliance, assessment, or ISSO experience.

Responsibilities

• Provide system-level ISSO support under the direction of the Lead and Senior ISSOs.
• Maintain security records, collect and validate evidence, update CSAM records, track POA&Ms, reconcile ServiceNow actions, support access and account reviews, prepare recurring reports, and coordinate with system owners and technical teams.

Skills

Security+

NIST 800-37

NIST 800-53

POA&M

SSP documentation

Continuous monitoring

Change-impact analysis

CSAM

eMASS

XACTA

Archer

ServiceNow GRC

ServiceNow ITSM

Audit support

Evidence collection

Education

Bachelor’s degree preferred

Tools

CSAM

eMASS

Xacta

Archer

ServiceNow GRC

ServiceNow ITSM

Job description

We are a growing information technology company that offers its employees a culture of success, the chance to work on revolutionary federal IT infrastructure, and the opportunity to grow alongside cutting-edge technology that is reshaping the industry. We are seeking forward-thinking candidates that have strong experience in operational support and can help take to the next level in a proactive stance.

Chameleon Integrated Services has expertise in operations management, quality systems, data operations and cybersecurity. We secure some of the most sensitive data for the Department of Defense and for other U.S. federal government agencies. We are known for the great care we take with clients and employees, and we believe in promoting from within.

We offer a Full Benefits package including:

• Competitive Employee Health Insurance options including dental


• 100% company paid vision plan


• 401K plan with generous company match and no vesting period


• 100% company paid life insurance


• 100% company paid long and short-term disability insurance


• Training allowance


• PTO and more

ISSO / Security Compliance Analyst

• Must be a United States citizen.


• Must be eligible for a Tier 4 High-Risk Public Trust investigation.


• Strong preference for a current or recently favorably adjudicated Tier 4 or Tier 5 investigation.

Role:

Provide system-level ISSO support under the direction of the Lead and Senior ISSOs. Maintain security records, collect and validate evidence, update CSAM records, track POA&Ms, reconcile ServiceNow actions, support access and account reviews, prepare recurring reports, and coordinate with system owners and technical teams.

This position carries an assigned system portfolio and is not limited to clerical documentation. The analyst must understand the relationship among system architecture, controls, vulnerabilities, changes, incidents, evidence, and authorization status.

Minimum Requirements:

• At least 4 years of cybersecurity, information assurance, compliance, assessment, or ISSO experience


• At least 2 years supporting federal systems


• Working knowledge of:
  
  
  
  • NIST SP 800-37
  
  
  • NIST SP 800-53
  
  
  • SSPs
  
  
  • POA&Ms
  
  
  • Security-control evidence
  
  
  • Continuous monitoring
  
  
  • Change-impact analysis
  
  
  
  


• Experience using at least one GRC platform:
  
  
  
  • CSAM
  
  
  • eMASS
  
  
  • Xacta
  
  
  • Archer
  
  
  • ServiceNow GRC
  
  
  
  


• Experience using ServiceNow or another ITSM platform


• Ability to review evidence for currency, completeness, ownership, and traceability


• Security+ required or obtainable before start


• Bachelor’s degree preferred but not required

Competitive Differentiators:

• CSAM experience


• FISMA Moderate systems


• Tenable, Qualys, or Splunk experience


• Azure Government or Microsoft 365 GCC/GCC High


• FedRAMP documentation


• Audit evidence collection and response


• Current federal suitability


• CGRC certification

The resume must clearly identify:

• Systems supported


• GRC and ITSM tools used


• Artifacts maintained


• POA&M responsibilities


• Evidence collection and validation work


• Audit or assessment support


• Security impact analysis or change-control involvement


• Measurable backlog, timeliness, quality, or closure results

“We are an equal opportunity employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, sexual orientation, gender identity, disability or protected veteran status”

Texting Privacy Policy

• Message type: Informational; you will receive text messages regarding your application and potentially regarding interview scheduling.


• No mobile information will be shared with third parties/affiliates for marketing/promotional purposes.


• Message frequency will vary depending on the application process.Msg & data rates may apply.


• OPT out at any time by texting \"Stop\".