Senior ISSO – Federal Education IT Security Lead

Cybersecurity Jobs; San Francisco (CA); On-site; USD 106,000 - 173,000; Full time

Job summary

U.S. Department of Education's Federal Student Aid seeks an Information System Security Officer (ISSO) to oversee security activities within the Security Services Division.

You will ensure IT security controls, prepare security authorization documents, and maintain compliance with policies across the system. The role requires specialized experience, IT certification, and the ability to manage incident response, risks, and secure outsourcing practices.

Qualifications

• Knowledge of cybersecurity risk management processes.
• Knowledge of cybersecurity and privacy principles, vulnerabilities, impacts of cybersecurity lapses, and applicable business processes.
• Knowledge of vulnerability information dissemination sources and incident response methodologies.
• Ability to integrate cybersecurity requirements into system modification processes using baseline security controls.

Responsibilities

• Oversee implementation of IT security controls and security authorization documents.
• Conduct security analysis to verify measures are in place, enforced, and remediated as needed.
• Identify possible security violations, follow incident reporting procedures, and take corrective action.
• Ensure system modifications, acquisitions, and outsourcing include information security requirements.
• Continuously validate the system against policies, guidelines, procedures, regulations, and laws.

Skills

Security risk management

Incident response

Compliance

IT security

Communication

Education

IT certification

Job description

U.S. Department of Education's Federal Student Aid seeks an Information System Security Officer (ISSO) to oversee security activities within the Security Services Division.

You will ensure IT security controls, prepare security authorization documents, and maintain compliance with policies across the system. The role requires specialized experience, IT certification, and the ability to manage incident response, risks, and secure outsourcing practices.