Security & Compliance Lead / ISSO

ITCON Services; United States; On-site; USD 140,000 - 190,000; Full time

Job summary

ITCON Services is seeking an experienced Security & Compliance Lead to oversee cybersecurity, privacy, authorization, and continuous compliance activities supporting a federal Census environment.

This role will lead the implementation of security controls, ensure compliance with federal regulations, and safeguard sensitive government information, including Title 13 data and PII, across the system lifecycle.

Qualifications

• Minimum 8 years of federal cybersecurity experience.
• Strong knowledge of the NIST RMF.
• Extensive experience with NIST SP 800-53 controls and compliance.
• Experience supporting FISMA-compliant federal systems.
• Demonstrated success with security assessments, ATO packages, and authorization activities.
• Experience with continuous monitoring, vulnerability management, and POA&M processes.

Responsibilities

• Lead implementation and enforcement of Census Bureau and federal cybersecurity requirements.
• Support RMF processes and Authority to Operate activities throughout the system lifecycle.
• Manage compliance with FedRAMP, FISMA, NIST, CJIS, privacy, and security-control requirements.
• Protect Title 13 data, PII, and other sensitive Census information.
• Coordinate continuous monitoring activities, vulnerability management, POA&M management, and security reporting.
• Oversee identity and access management, encryption, audit logging, incident response, and secure integrations.
• Lead security readiness efforts, assessments, audits, evidence collection, remediation planning, and compliance reporting.
• Collaborate with government stakeholders, partner organizations, and technical teams to ensure security objectives are achieved.
• Identify and mitigate cybersecurity risks while maintaining compliance with federal requirements.
• Support security governance and continuous improvement initiatives.

Skills

Federal cybersecurity

RMF knowledge

NIST SP 800-53 expertise

FISMA compliance

Security assessments

Risk management

Job description

We are seeking an experienced Security & Compliance Lead to oversee all cybersecurity, privacy, authorization, and continuous compliance activities supporting a federal Census environment. This role will lead the implementation of security controls, ensure compliance with federal regulations and standards, and safeguard sensitive government information, including Title 13 and Personally Identifiable Information (PII).

The ideal candidate will possess deep expertise in federal cybersecurity frameworks, security authorization processes, and continuous monitoring practices, with the ability to collaborate effectively across technical teams, program leadership, and government stakeholders.

Key Responsibilities

• Lead implementation and enforcement of Census Bureau and federal cybersecurity requirements.
• Support Risk Management Framework (RMF) processes and Authority to Operate (ATO) activities throughout the system lifecycle.
• Manage compliance with applicable FedRAMP, FISMA, NIST, CJIS, privacy, and security-control requirements.
• Protect Title 13 data, PII, and other sensitive Census information.
• Coordinate continuous monitoring activities, vulnerability management, POA&M management, and security reporting.
• Oversee identity and access management, encryption, audit logging, incident response, and secure integrations.
• Lead security readiness efforts, assessments, audits, evidence collection, remediation planning, and compliance reporting.
• Collaborate with government stakeholders, partner organizations, and technical teams to ensure security objectives are achieved.
• Identify and mitigate cybersecurity risks while maintaining compliance with federal requirements.
• Support security governance and continuous improvement initiatives.

Required Qualifications

• Minimum 8 years of federal cybersecurity experience.
• Strong knowledge of the NIST Risk Management Framework (RMF).
• Extensive experience with NIST SP 800-53 security controls and compliance requirements.
• Experience supporting FISMA-compliant federal systems.
• Demonstrated success supporting security assessments, ATO packages, and authorization activities.
• Experience with continuous monitoring, vulnerability management, and POA&M processes.
• Strong written and verbal communication skills.
• Ability to work effectively with government clients and cross-functional teams.

Preferred Qualifications

• Experience supporting FedRAMP Moderate or High cloud environments.
• Familiarity with CJIS Security Policy requirements.
• Experience working within the federal agencies.
• Knowledge of cloud security, secure system integrations, and privacy compliance requirements.

Certifications Preferred

One or more of the following certifications are highly desirable:

• CISSP (Certified Information Systems Security Professional)
• CISM (Certified Information Security Manager)
• GSLC, CCSP, or comparable cybersecurity certification

Why Join Us?

• Support a high-impact federal mission protecting critical government data.
• Work with innovative technologies and complex security environments.
• Collaborate with experienced cybersecurity, cloud, and compliance professionals.
• Competitive compensation and benefits package.
• Opportunities for professional growth and certification development.

Position Contingency Notice

This position is being recruited in support of an upcoming federal contract opportunity and is contingent upon contract award, funding, and final client approval. ITCON Services is proactively identifying qualified candidates in anticipation of the program's potential start. Candidates selected for consideration will be kept informed regarding the anticipated timeline and status of the opportunity throughout the recruitment process.