Senior ISSO: Lead Cybersecurity & Compliance for FEMA Ops

Zantech IT Services; Washington (District of Columbia); On-site; USD 140,000 - 180,000; Full time

Job summary

Zantech is seeking a Senior Information System Security Officer to lead cybersecurity compliance for complex systems and serve as the Cybersecurity Division's primary point of contact for FEMA-based onsite work at the Headquarters in Washington, DC.

The Sr ISSO will oversee RMF implementations, SSPs, security assessments, and authorization activities, while collaborating with system owners and stakeholders to ensure robust security postures across call orders.

Qualifications

• 10+ years in cybersecurity and information systems security.
• Expert knowledge of NIST RMF and related guidelines.
• Experience implementing DHS 4300A/4300B policies and FISMA reporting.

Responsibilities

• Lead cybersecurity compliance efforts for complex systems.
• Serve as primary POC for all security matters.
• Develop and maintain System Security Plans (SSPs).
• Conduct security assessments and authorize systems.
• Manage Plans of Action and Milestones (POA&Ms).
• Coordinate with system owners and stakeholders.
• Oversee continuous monitoring activities.
• Lead incident response activities for assigned systems.
• Provide cybersecurity guidance to senior leadership.
• Mentor junior ISSO staff.
• Works across all active call orders on assigned systems.
• May require deployment to disaster locations.
• Must support 24/7 operations during emergencies.

Skills

NIST RMF

DHS 4300A/4300B

FISMA compliance

Security controls

Risk assessment

Security authorization

Incident response

Vulnerability management

Cloud security

Leadership/mentoring

Education

IAT Level III: CISSP, CISM, or CASP+

Job description

Zantech is seeking a Senior Information System Security Officer to lead cybersecurity compliance for complex systems and serve as the Cybersecurity Division's primary point of contact for FEMA-based onsite work at the Headquarters in Washington, DC.

The Sr ISSO will oversee RMF implementations, SSPs, security assessments, and authorization activities, while collaborating with system owners and stakeholders to ensure robust security postures across call orders.