Senior InfoSec Officer for Government Systems & DevOps

UNAVAILABLE; McLean (VA); On-site; USD 140,000 - 190,000; Full time

Job summary

Steampunk seeks a Principal Information System Security Officer to support a government customer in the DMV area. The role emphasizes maintaining the security posture documented in the security authorization and requires initiative, organization, and sound judgement handling sensitive information.

The candidate will lead ISSO efforts, coordinate with privacy and governance teams, and apply DHS/NIST RMF guidance across development lifecycles while ensuring compliance and audit readiness in a

Qualifications

• Bachelor’s degree with FISMA-related cybersecurity experience required.
• No degree option requires 12+ years cybersecurity experience with 10+ years FISMA-related.
• Master’s in IT with 6+ years cybersecurity experience and FISMA-related required.

Responsibilities

• Proactively manage POA&Ms and ensure weaknesses are resolved by deadlines.
• Create waivers or risk acceptance memos for risk management.
• Conduct annual DHS/IS performance plan aligned assessments.
• Review and update security authorization documents annually.
• Perform annual contingency plan tests and updates.
• Support audit activities across various standards (FISMA, DHS, etc.).
• Coordinate with privacy, records, and information governance divisions.

Skills

FISMA-related cybersecurity

NIST RMF knowledge

Security risk assessment

Team leadership

Education

Bachelor’s Degree and 8 years of cybersecurity experience (FISMA-related)

No degree and 12 years of cybersecurity experience (10 FISMA-related)

Master’s Degree in an IT field and 6 years of cybersecurity experience (FISMA-related)

Job description

Steampunk seeks a Principal Information System Security Officer to support a government customer in the DMV area. The role emphasizes maintaining the security posture documented in the security authorization and requires initiative, organization, and sound judgement handling sensitive information.

The candidate will lead ISSO efforts, coordinate with privacy and governance teams, and apply DHS/NIST RMF guidance across development lifecycles while ensuring compliance and audit readiness in a