Remote ISSO — RMF & NIST Lead

Guidehouse; United States; Hybrid; USD 74,000 - 124,000; Full time

Benefits offered by this job

Medical Insurance

Dental & Vision Insurance

Sick Time & Holidays

Parental Leave

401(k) Plan

Life Insurance

HSA & FSA

Transit Benefits

Disability Insurance

Tuition Reimbursement

Employee Referral Program

Community Outreach

Care.com Membership

Employee Assistance Program

Corestream Benefits

Job summary

Guidehouse is seeking an Information Security Systems Officer (ISSO) to support RMF across authorization boundaries, including system categorization and control tailoring. This role requires a Security+ and at least three years in cybersecurity, with cloud security experience.

You will develop and maintain SSPs, POA&Ms, risk assessments, and continuous monitoring artifacts, coordinate vulnerability management, and support ATO processes and ongoing authorization activities in a remote United

Qualifications

• Bachelor’s degree in computer science, information technology, or cybersecurity.
• Current Security+ certificate.
• Minimum 3 years of experience in cybersecurity.
• Experience with enterprise cybersecurity risk management and governance tools.
• Experience with cloud security.
• Ability to obtain and maintain a Federal or DoD Public Trust.

Responsibilities

• Support the implementation and ongoing execution of the NIST RMF requirements across assigned authorization boundaries.
• Assist in system categorization in accordance with FIPS 199 and NIST SP 800-60 guidance.
• Help identify, document, and maintain security controls and documentation (SSPs, POA&Ms, risk assessments, monitoring).
• Support security control assessments, remediation efforts, and authorization activities.
• Identify security weaknesses, document findings, and coordinate corrective actions.
• Coordinate vulnerability scanning and track remediation of findings.

Skills

Security+ Certification

Cloud Security

RMF/NIST Knowledge

Education

Bachelor’s degree in computer science, information technology, or cybersecurity

Tools

GRC Tools

Job description

Guidehouse is seeking an Information Security Systems Officer (ISSO) to support RMF across authorization boundaries, including system categorization and control tailoring. This role requires a Security+ and at least three years in cybersecurity, with cloud security experience.

You will develop and maintain SSPs, POA&Ms, risk assessments, and continuous monitoring artifacts, coordinate vulnerability management, and support ATO processes and ongoing authorization activities in a remote United