ISSO: Security & Compliance Lead for Federal Systems

RPMGlobal; Maryland; On-site; USD 120,000 - 160,000; Full time

Job summary

Base-2 Solutions seeks an Information Systems Security Officer (ISSO) to ensure the security posture of mission-critical systems. The ISSO will support compliance, manage risk, and enforce security policies across lifecycle programs.

Ideal candidates have strong regulatory knowledge, meticulous documentation skills, and the ability to coordinate with government stakeholders on security initiatives.

Qualifications

• Follows NIST SP 800-53, RMF, ICD 503, CNSS, DoD STIGs, FISMA, FedRAMP guidance.
• Maintains SSPs, SARs, POA&Ms, and continuous monitoring artifacts.
• Leads or supports assessments, audits, and inspections with stakeholders.
• Performs risk assessments and provides mitigation recommendations.
• Manages RMF-based authorization activities and related artifacts.
• Monitors security posture, incident response, and remediation efforts.
• Collaborates with ISSEs, admins, and managers to integrate security into lifecycles.
• Delivers security awareness training and enforces best practices.
• Liaises with government customers for timely updates.

Responsibilities

• Ensure system compliance with federal, DoD, and IC cybersecurity regulations and standards, including NIST, ICD 503, CNSS, and RMF.
• Maintain and update security documentation, including System Security Plans (SSPs), Security Assessment Reports (SARs), Plan of Action and Milestones (POA&Ms), and Continuous Monitoring Plans.
• Coordinate and support security assessments, audits, and inspections by internal and external stakeholders.
• Conduct risk assessments and vulnerability analysis, providing recommendations for mitigating identified risks.
• Facilitate and oversee system authorization activities in accordance with the RMF process.
• Monitor and report on system security posture, incident response, and remediation efforts.
• Collaborate with ISSEs, system administrators, and program managers to integrate security requirements into system lifecycle.
• Provide security awareness training to system users and enforce proper security practices.
• Act as a liaison between the organization and government customers, ensuring timely communication of security updates and issues.

Skills

Security frameworks

Documentation

Risk assessment

Communication

Collaboration

Cloud security

Operating systems

Audit support

Security certifications

TS/SCI clearance

Education

CISSP

CAP

Security+

CISM

CEH

AWS Security Specialty

Tools

ACAS

Nessus

Splunk

HBSS

eMASS

Xacta

Job description

Base-2 Solutions seeks an Information Systems Security Officer (ISSO) to ensure the security posture of mission-critical systems. The ISSO will support compliance, manage risk, and enforce security policies across lifecycle programs.

Ideal candidates have strong regulatory knowledge, meticulous documentation skills, and the ability to coordinate with government stakeholders on security initiatives.