Senior Information System Security Officer (ISSO)
ERP International
Turn this role into an interview — a resume and cover letter built around what this employer wants.
Benefits offered by this job
Job summary
ERP International, LLC is seeking a full-time Information System Security Officer (ISSO) to support cybersecurity, privacy, risk management, and compliance for federal information systems. The role offers remote work within the U.S.
and requires collaboration with government and contractor stakeholders to strengthen security posture. The ideal candidate will have 5+ years of cybersecurity experience in regulated environments, 3+ years as an ISSO, and demonstrated RMF and NIST-based expertise,
Qualifications
- Bachelor's degree in Cybersecurity, Information Systems, Computer Science, Engineering, or related field.
- 5+ years of cybersecurity experience supporting federal, healthcare, defense, or highly regulated environments.
- 3+ years serving as an ISSO, Information Security Specialist, Security Analyst, Security Engineer, or similar role.
- Experience supporting NIST RMF activities.
- Experience with: NIST SP 800-53, NIST SP 800-37, FISMA compliance, Continuous Monitoring, Security Control Assessments, POA&Ms Management.
- Strong written and verbal communication skills.
Responsibilities
- Support the implementation and execution of the NIST Risk Management Framework (RMF).
- Develop, review, and maintain security authorization documentation including: System Security Plans (SSPs), Security Assessment Reports (SARs), Plans of Action and Milestones (POA&Ms).
- Contingency Plans and security/privacy supporting artifacts.
- Support system authorization, reauthorization, and continuous authorization activities.
- Ensure compliance with applicable federal cybersecurity and privacy requirements.
- Perform cybersecurity risk assessments and control analyses.
- Monitor security posture through continuous monitoring activities.
- Track vulnerabilities, remediation activities, and corrective action plans.
- Support security reporting and risk communication activities.
- Identify control deficiencies and recommend mitigation strategies.
- Participate in security governance forums and technical reviews.
- Coordinate with system owners, engineers, developers, operations teams, and security personnel.
- Provide cybersecurity guidance to government and contractor stakeholders.
- Support audit readiness, compliance reviews, and independent assessments.
- Develop executive briefings, status reports, and cybersecurity metrics.
- Assist with incident response coordination and post-incident reviews.
- Support security control testing and validation efforts.
- Evaluate proposed system changes for cybersecurity impacts.
- Participate in contingency planning and continuity activities.
Skills
Education
Tools
Job description
We appreciate your interest in becoming part of our team. Although this requisition does not apply to a specific immediate opening , we value proactive candidates like yourself who are looking to build a meaningful career with ERP International. We will keep your application on file and contact you when suitable opportunities arise. (Applying for the future openings posting does not guarantee employment).
Remote (U.S.) | Occasional Travel May Be Required
ERP International, LLC ( www.erpinternational.com ) is currently seeking a Full Time Information System Security Officer (ISSO) to support cybersecurity, privacy, risk management, and compliance initiatives for large-scale federal information systems and enterprise technology environments. Qualified candidates are urged to apply to learn more about this great opportunity!
The selected candidate will serve as a trusted cybersecurity advisor responsible for supporting the security authorization lifecycle, ensuring compliance with federal security requirements, conducting risk assessments, supporting continuous monitoring activities, and collaborating with technical and business stakeholders to strengthen organizational security posture.
This position is ideal for professionals with experience supporting federal civilian agencies, healthcare organizations, or other highly regulated environments that require rigorous security, privacy, and compliance oversight.
- *** Competitive Salaries & Benefits to include Health, Dental, Vision and Retirement!**
- *** Health Advocate & Concierge Services!**
- *** Unlimited Job- Related Training & Development!**
- *** Employee Recognition & Incentive Programs!**
- *** Employee Appreciation & Company Sponsored Events!**
- *** Opportunity to work with leading edge technology!**
- *** Community Outreach & Charity Work!**
$145,000 – $185,000
The salary range for this position is determined based on a variety of factors, including but not limited to, experience, qualifications, skill level, and location. The final salary offer will fall within this range and will be commensurate with the candidate’s background and the specific demands of the role.
ERP is a nationally respected provider of health, science, and technology solutions supporting clients in the government and commercial sectors. We provide comprehensive enterprise information technology, strategic sourcing, and management solutions to DoD and federal civilianagencies in 40 states. Founded in 2006, ERP is headquartered in Laurel, MD and maintains satellite offices in Montgomery, AL and San Antonio, TX - plus project locations nationwide.
- Support the implementation and execution of the NIST Risk Management Framework (RMF).
- Develop, review, and maintain security authorization documentation including:
- System Security Plans (SSPs)
- Security Assessment Reports (SARs)
- Plans of Action and Milestones (POA&Ms)
- Contingency Plans
- Security and privacy supporting artifacts
- Support system authorization, reauthorization, and continuous authorization activities.
- Ensure compliance with applicable federal cybersecurity and privacy requirements.
- Perform cybersecurity risk assessments and control analyses.
- Monitor security posture through continuous monitoring activities.
- Track vulnerabilities, remediation activities, and corrective action plans.
- Support security reporting and risk communication activities.
- Identify control deficiencies and recommend mitigation strategies.
- Participate in security governance forums and technical reviews.
- Coordinate with system owners, engineers, developers, operations teams, and security personnel.
- Provide cybersecurity guidance to government and contractor stakeholders.
- Support audit readiness, compliance reviews, and independent assessments.
- Develop executive briefings, status reports, and cybersecurity metrics.
- Assist with incident response coordination and post-incident reviews.
- Support security control testing and validation efforts.
- Evaluate proposed system changes for cybersecurity impacts.
- Participate in contingency planning and continuity activities.
- Bachelor's degree in Cybersecurity, Information Systems, Computer Science, Engineering, or related field.
- 5+ years of cybersecurity experience supporting federal, healthcare, defense, or highly regulated environments.
- 3+ years serving as an ISSO, Information Security Specialist, Security Analyst, Security Engineer, or similar role.
- Experience supporting NIST Risk Management Framework (RMF) activities.
- Experience with:
- NIST SP 800-53
- NIST SP 800-37
- FISMA compliance
- Continuous Monitoring
- Security Control Assessments
- POA&Ms Management
- Experience developing security documentation and compliance artifacts.
- Strong written and verbal communication skills.
- Experience supporting enterprise cybersecurity programs.
- Experience working in cloud or hybrid-cloud environments.
- Experience supporting audit readiness activities.
- Experience working with security automation and vulnerability management platforms.
- Experience supporting Zero Trust initiatives.
- Experience supporting large-scale digital modernization efforts.
One or more of the following:
- CISSP
- CGRC (formerly CAP)
- CISM
- CRISC
- Security+ CEH
- GSEC
- GSLC
- Cybersecurity Governance
- Risk Management
- Continuous Monitoring
- Vulnerability Management
- Security Assessments
- Compliance Monitoring
- Security Documentation
- Executive Reporting
- Audit Readiness
- Incident Response
- Cloud Security
- Security Architecture
- Privacy Compliance
- Must be able to obtain a government publc trust Clearance/background check
- Recruiter Pre-Screen
- If selected, Interview with Hiring Manager and/or Technical Lead
ERP International is an Equal Opportunity Employer and does not discriminate against any employee or applicant for employment on the basis of race, color, sex, religion, national origin, veteran status, disability status, age, or any other characteristic protected by federal, state, or local law.
ERP International is committed to hiring and retaining a diverse workforce. ERP is an equal opportunity/affirmative action employer and does not discriminate on the basis of race, color, creed, sex, national origin, religion, age, disability, pregnancy or veteran status. We welcome the employment of women, minorities, veterans and individuals with disabilities in our workforce. If you are in need of special assistance, please contact our Human Resources Department. Interested parties may view our Affi
ERP participates in E-Verify.
'/%3e%3cpath%20d='M101.744%2012.4726L102.894%2016.1947L99.0021%2013.2201L101.744%2012.4726ZM105.3%208.40937H100.488L99.0026%203.59473L97.5116%208.41047L92.7%208.40385L96.5965%2011.3834L95.1055%2016.1942L99.0021%2013.2196L101.408%2011.3834L105.3%208.40992V8.40937Z'%20fill='white'/%3e%3cdefs%3e%3clinearGradient%20id='paint0_linear_5593_1381'%20x1='90'%20y1='9.44471'%20x2='99'%20y2='9.44471'%20gradientUnits='userSpaceOnUse'%3e%3cstop%20stop-color='%2300AD70'/%3e%3cstop%20offset='0.998594'%20stop-color='%2300B67A'/%3e%3cstop%20offset='1'%20stop-color='%23DCDCE6'/%3e%3c/linearGradient%3e%3c/defs%3e%3c/svg%3e){kind=small}
