Senior Information System Security Officer (ISSO)

ERP International, LLC; Laurel (MD); On-site; USD 145,000 - 185,000; Full time

Job summary

ERP International, LLC is seeking a Full Time Information System Security Officer (ISSO) to support cybersecurity, privacy, risk management, and compliance for federal information systems. Remote (U.S.) with occasional travel; 5+ years in cybersecurity and 3+ years as ISSO preferred.

The role focuses on RMF implementation, security documentation, risk assessment, and continuous monitoring while coordinating with government and contractor stakeholders.

Qualifications

• Bachelor's degree in Cybersecurity, Information Systems, Computer Science, Engineering, or related field.
• 5+ years of cybersecurity experience supporting federal, healthcare, defense, or highly regulated environments.
• 3+ years serving as an ISSO, Information Security Specialist, Security Analyst, Security Engineer, or similar role.
• Experience supporting NIST RMF activities and security documentation.
• Strong written and verbal communication skills; ability to work with diverse stakeholders.

Responsibilities

• Security Authorization & Compliance: implement RMF, maintain SSPs and SARs, POA&Ms, contingencies.
• Risk Management & Continuous Monitoring: perform risk assessments, monitor posture, track remediation.
• Governance & Stakeholder Engagement: participate in governance forums and coordinate with stakeholders.
• Security Operations Support: assist incident response, testing, and impact assessments; contingency planning.
• Audit readiness and compliance: support reviews and independent assessments; develop executive metrics.

Skills

RMF knowledge

Strong communication

Security governance

Risk management

Cybersecurity expertise

Education

Bachelor's degree in Cybersecurity, Information Systems, Computer Science, Engineering, or related field

Tools

NIST SP 800-53

NIST SP 800-37

FISMA compliance

POA&M Management

Job description

Overview

Location

Remote (U.S.) | Occasional Travel May Be Required

We appreciate your interest in becoming part of our team. Although this requisition does not apply to a specific immediate opening , we value proactive candidates like yourself who are looking to build a meaningful career with ERP International. We will keep your application on file and contact you when suitable opportunities arise. (Applying for the future openings posting does not guarantee employment).

ERP International, LLC (www.erpinternational.com) is currently seeking a Full Time Information System Security Officer (ISSO) to support cybersecurity, privacy, risk management, and compliance initiatives for large-scale federal information systems and enterprise technology environments. Qualified candidates are urged to apply to learn more about this great opportunity!

The selected candidate will serve as a trusted cybersecurity advisor responsible for supporting the security authorization lifecycle, ensuring compliance with federal security requirements, conducting risk assessments, supporting continuous monitoring activities, and collaborating with technical and business stakeholders to strengthen organizational security posture.

This position is ideal for professionals with experience supporting federal civilian agencies, healthcare organizations, or other highly regulated environments that require rigorous security, privacy, and compliance oversight.

Be the Best! ERP International is honored to be named a 2026 Top Workplace by WTOP News! 7 Years Running.

ERP Offers Employees:

* Competitive Salaries & Benefits to include Health, Dental, Vision and Retirement!* Health Advocate & Concierge Services!* Unlimited Job- Related Training & Development!

* Employee Recognition & Incentive Programs!

* Employee Appreciation & Company Sponsored Events!* Opportunity to work with leading edge technology!

* Community Outreach & Charity Work!

ERP is an Equal Opportunity Employer and does not discriminate against any employee or applicant for employment on the basis of race, color, sex, religion, national origin, veteran status, disability status, age, or any other characteristic protected by federal, state, or local law.

ERP International is committed to providing veteran employment opportunities to our service men and women.

Pay Range: $145,000 – $185,000

The salary range for this position is determined based on a variety of factors, including but not limited to, experience, qualifications, skill level, and location. The final salary offer will fall within this range and will be commensurate with the candidate’s background and the specific demands of the role.

About ERP International, LLC:ERP is a nationally respected provider of health, science, and technology solutions supporting clients in the government and commercial sectors. We provide comprehensive enterprise information technology, strategic sourcing, and management solutions to DoD and federal civilian agencies in 40 states. Founded in 2006, ERP is headquartered in Laurel, MD and maintains satellite offices in Montgomery, AL and San Antonio, TX - plus project locations nationwide.

Responsibilities

Key Responsibilities

Security Authorization & Compliance

• Support the implementation and execution of the NIST Risk Management Framework (RMF).


• Develop, review, and maintain security authorization documentation including:




• System Security Plans (SSPs)


• Security Assessment Reports (SARs)


• Plans of Action and Milestones (POA&Ms)


• Contingency Plans


• Security and privacy supporting artifacts




• Support system authorization, reauthorization, and continuous authorization activities.


• Ensure compliance with applicable federal cybersecurity and privacy requirements.

Risk Management & Continuous Monitoring

• Perform cybersecurity risk assessments and control analyses.


• Monitor security posture through continuous monitoring activities.


• Track vulnerabilities, remediation activities, and corrective action plans.


• Support security reporting and risk communication activities.


• Identify control deficiencies and recommend mitigation strategies.

Governance & Stakeholder Engagement

• Participate in security governance forums and technical reviews.


• Coordinate with system owners, engineers, developers, operations teams, and security personnel.


• Provide cybersecurity guidance to government and contractor stakeholders.


• Support audit readiness, compliance reviews, and independent assessments.


• Develop executive briefings, status reports, and cybersecurity metrics.

Security Operations Support

• Assist with incident response coordination and post-incident reviews.


• Support security control testing and validation efforts.


• Evaluate proposed system changes for cybersecurity impacts.


• Participate in contingency planning and continuity activities.

Qualifications

Required Qualifications

• Bachelor's degree in Cybersecurity, Information Systems, Computer Science, Engineering, or related field.


• 5+ years of cybersecurity experience supporting federal, healthcare, defense, or highly regulated environments.


• 3+ years serving as an ISSO, Information Security Specialist, Security Analyst, Security Engineer, or similar role.


• Experience supporting NIST Risk Management Framework (RMF) activities.


• Experience with:




• NIST SP 800-53


• NIST SP 800-37


• FISMA compliance


• Continuous Monitoring


• Security Control Assessments


• POA&M Management




• Experience developing security documentation and compliance artifacts.


• Strong written and verbal communication skills.

Preferred Qualifications

• Experience supporting enterprise cybersecurity programs.


• Experience working in cloud or hybrid-cloud environments.


• Experience supporting audit readiness activities.


• Experience working with security automation and vulnerability management platforms.


• Experience supporting Zero Trust initiatives.


• Experience supporting large-scale digital modernization efforts.

Preferred Certifications

One or more of the following:

• CISSP


• CGRC (formerly CAP)


• CISM


• CRISC


• Security+


• CEH


• GSEC


• GSLC

Desired Skills

• Cybersecurity Governance


• Risk Management


• Continuous Monitoring


• Vulnerability Management


• Security Assessments


• Compliance Monitoring


• Security Documentation


• Executive Reporting


• Audit Readiness


• Incident Response


• Cloud Security


• Security Architecture


• Privacy Compliance

Clearance Requirements:

• Must be able to obtain a government publc trust Clearance/background check

Standard Interview & Selection Process:

• Recruiter Pre-Screen


• If selected, Interview with Hiring Manager and/or Technical Lead