Senior Information System Security Officer (ISSO)

ShorePoint; Albuquerque (NM); On-site; USD 120,000 - 180,000; Full time

Benefits offered by this job

PTO 144 hours

11 holidays

Health insurance coverage

401(k)

Education reimbursement

Certification support

Job summary

ShorePoint in Albuquerque, NM seeks an experienced Senior Information System Security Officer to drive RMF activities and maintain system security plans, risk databases and remediation actions. You will lead authorization processes, monitor controls across complex environments, and coordinate with federal stakeholders to ensure compliance.

Candidates should have 10+ years in federal cybersecurity, strong documentation skills, and an ability to translate complex requirements into actionable tasks

Qualifications

• Bachelor's degree is required; a postgraduate degree may substitute for 6 years of experience.
• 10+ years of relevant work experience in federal cybersecurity.
• U.S. citizenship and eligibility to obtain/maintain security clearance.
• Strong RMF, ATO, continuous monitoring, and POA&M lifecycle experience.

Responsibilities

• Lead development, review, and maintenance of system security plans and authorization artifacts.
• Drive continuous monitoring and validate security controls across complex environments.
• Develop or support POA&Ms and direct remediation activities with stakeholders.
• Execute self-assessments and collect evidence for authorization reviews.
• Manage enterprise asset, vulnerability, and compliance information in governance tools.
• Ensure documentation quality and alignment with requirements.

Skills

ISSO RMF lead

Security documentation

Continuous monitoring

Government stakeholder coordination

Education

Bachelor's degree

Postgraduate degree substitution for experience

Tools

GRC tools

Job description

Who we are:

ShorePoint is a fast-growing, industry-recognized and award-winning cybersecurity services firm focused on high-profile, high-threat public and private sector customers who demand experience and proven security models to protect their data. We embrace a "work hard, play hard" mentality and celebrate individual and company successes. We are passionate about our mission and going above and beyond to deliver for our customers, while fostering an environment that supports creativity, accountability, mission success, critical thinking and a desire to give back to our community.

The Perks:

As recognized members of the Cyber Elite, we work together in partnership to defend our nation's critical infrastructure while building meaningful and exciting career development opportunities in a culture tailored to the individual's technical and professional growth. We are committed to the belief that our team members do their best work when they are happy and well cared for. In support of this philosophy, we offer a comprehensive benefits package, major carriers for healthcare providers. Highlighted benefits include 144 hours of PTO, 11 holidays, 85% of insurance premiums covered, a 401(k), continuing education, certification maintenance and reimbursement and more.

Who we're looking for:

We are seeking an experienced Senior Information System Security Officer (ISSO) to drive Risk Management Framework (RMF) activities, security documentation, control validation, and ongoing compliance efforts across assigned enterprise systems. The ideal candidate will possess deep experience managing authorization packages, executing continuous monitoring strategies, and leading corrective action tracking in a federal environment. The Sr. ISSO role takes full ownership of maintaining system security plans, updating risk databases, and directing remediation actions with technical and operational stakeholders. This is a unique opportunity to shape the growth, development and culture of an exciting and fast-growing company in the cybersecurity market. Employment for this position is dependent on the successful award of the contract.

What you'll be doing:

• Lead the development, review, and maintenance of system security plans, risk assessments, and related authorization artifacts.
• Drive continuous monitoring activities and conduct rigorous validation of implemented security controls across complex environments.
• Develop or support Plans of Action and Milestones (POA&Ms), directing remediation activities with technical and operational stakeholders to ensure timely deficiency resolution.
• Execute system self-assessments and lead the systematic collection and verification of compliance evidence for authorization reviews.
• Manage enterprise asset, vulnerability, and compliance information within designated governance and risk tools.
• Ensure documentation quality, completeness, and alignment with federal and organizational requirements.

What you need to know:

• Strong experience as an ISSO or RMF lead in a federal cybersecurity environment.
• Familiarity with ATO processes, continuous monitoring, POA&M lifecycle management, and security documentation requirements.
• Strong organizational and documentation skills.
• Ability to coordinate effectively with government stakeholders and technical staff.
• Strong understanding of cybersecurity controls, risk management, and compliance practices.

Must have's:

• Bachelor's degree from an accredited university; a postgraduate degree from an accredited university may substitute for 6 years of experience.
• 10+ years of relevant work experience.
• Proven ability to analyze complex requirements and translate them into clear, actionable tasks and processes through critical thinking.
• Applicants must currently be a U.S. citizen and eligible to obtain and maintain a security clearance, in compliance with federal contract requirements.

Beneficial to have:

• Active DOE Q or equivalent DoD Top Secret clearance.

Where it's done:

• Onsite (Albuquerque, NM).