Senior ISSO – Information Security Leader

Steampunk; McLean (VA); Hybrid; USD 120,000 - 145,000; Full time

Job summary

Steampunk seeks a Principal Information System Security Officer to support a government customer in the DMV. You will manage security authorization and risk, lead a team, and communicate with all levels of the organization to protect sensitive information.

The role requires initiative, organization, and the ability to adapt in a fast-paced environment, with responsibilities spanning POA&Ms, risk memos, annual DHS assessments, and DevOps security integration.

Qualifications

• Bachelor’s Degree with 8+ years cybersecurity experience, FISMA-related.
• No degree with 12+ years cybersecurity experience; 10+ years FISMA-related.
• Master’s Degree in IT with 6+ years cybersecurity experience (FISMA).
• Certifications: CISSP, CASP, CISA, CISM, SSCP, GISP, GSLC.

Responsibilities

• Proactively create, monitor and update POA&Ms to resolve weaknesses on schedule.
• Create Waivers or Risk Acceptance Memos to manage system risks.
• Conduct annual DHS security assessment per DHS plan.
• Review and update security authorization documents annually.
• Conduct Contingency Plan tests annually and update plans.
• Support ISVM/Patch management and audit activities.

Skills

ISSO leadership

Cybersecurity expertise

FISMA knowledge

NIST RMF familiarity

Vulnerability management

Education

Bachelor’s Degree in IT or related field

No degree with 12+ years cybersecurity (10+ FISMA)

Master’s Degree in IT with 6+ years FISMA-related

Tools

NIST SP 800 RMF

IA compliance tooling

Job description

Steampunk seeks a Principal Information System Security Officer to support a government customer in the DMV. You will manage security authorization and risk, lead a team, and communicate with all levels of the organization to protect sensitive information.

The role requires initiative, organization, and the ability to adapt in a fast-paced environment, with responsibilities spanning POA&Ms, risk memos, annual DHS assessments, and DevOps security integration.