Senior Information Systems Security Officer (ISSO)

Steampunk; Bloomington (IL); On-site; USD 120,000 - 145,000; Full time

Job summary

Steampunk seeks a Principal Information System Security Officer to support a government customer in the DMV region. The role emphasizes proactive risk management, authorization, and security controls across the system lifecycle.

You will interface with stakeholders to maintain an acceptable risk level and protect sensitive information. The ideal candidate has strong FISMA-related credentials, DHS experience, and a track record of leading ISSO teams in secure, cloud or DevOps environments.

Qualifications

• Bachelor’s Degree and 8 years of cybersecurity experience; must be FISMA-related
• No degree and 12 years of cybersecurity experience; 10 of which must be FISMA-related
• Master’s Degree in an IT field and 6 years of cybersecurity experience; must be FISMA-related

Responsibilities

• Proactively create, monitor and update POA&Ms to resolve weaknesses
• Create Waivers or Risk Acceptance Memos to manage system risks
• Conduct annual DHS guidance-based assessments and update security docs
• Review and update security authorization documents at least annually
• Conduct Contingency Plan tests annually and update the plan
• Perform self-assessments as part of Ongoing Authorization program
• Monitor and respond to ISVM/Patch Management
• Provide audit support for various audits (FISMA, DHS, etc.)
• Maintain inventory knowledge within accreditation boundary
• Coordinate with Privacy/Records/Info Gov for compliance
• Include security requirements in development cycles (Waterfall/Agile/SecDevOps)
• Ensure CM processes prevent new security risks
• Support ISVM compliance
• Experience leading a team of ISSOs

Skills

FISMA guidance

NIST RMF

Security controls

Vulnerability management

Audit support

Cloud security

DevSecOps

Leadership

Education

Bachelor's degree

No degree with 12 years cybersecurity

Master's degree in IT

Job description

Steampunk seeks a Principal Information System Security Officer to support a government customer in the DMV region. The role emphasizes proactive risk management, authorization, and security controls across the system lifecycle.

You will interface with stakeholders to maintain an acceptable risk level and protect sensitive information. The ideal candidate has strong FISMA-related credentials, DHS experience, and a track record of leading ISSO teams in secure, cloud or DevOps environments.