Senior ISSO: Secure-by-Design Cyber Risk Leader

Randstad USA; Washington (District of Columbia); On-site; USD 69,000 - 83,000; Full time

Job summary

Randstad Digital in Washington, DC seeks a Principal Information System Security Officer (ISSO) to embed cybersecurity as a strategic risk advisor across Agile Release Trains and product delivery. You will champion secure-by-design practices and drive secure technical decision-making with business stakeholders and engineering teams.

The role focuses on risk governance, compliance with NIST/FISMA/FedRAMP, and DevSecOps integration across enterprise architectures.

Qualifications

• 10+ years of progressive cybersecurity experience including ISSO/IA or security architecture in enterprise or government-adjacent environments.
• Deep knowledge of NIST SP 800-series (RMF, 800-53), FISMA, FedRAMP, ISO 27001 and CIS Benchmarks.
• Experience embedding security governance in Agile/SAFe and modern CI/CD pipelines.

Responsibilities

• Provide cybersecurity design oversight, threat modeling, and risk governance across ARTs and product pipelines.
• Embed security architectures and baseline controls early in SDLC to reduce debt and deployment risks.
• Serve as liaison between product managers, architects, engineers, and executives to balance agility with risk.
• Create and evaluate SSPs, RARs, SAPs, and POA&Ms.
• Ensure compliance with NIST, FISMA, FedRAMP and internal governance directives.
• Operationalize DevSecOps and automate continuous monitoring with secure coding standards.
• Lead remediation strategies for complex vulnerability findings.

Skills

Agile

AWS

APIs

CIS Benchmarks

Cybersecurity

Security Architecture

DevSecOps

CI/CD

NIST RMF

FedRAMP

Cloud architecture

Threat modeling

Security governance

SSPs

Security controls

Vulnerability management

Education

Bachelor's degree

Tools

Cloud platforms (AWS/Azure/GCP)

CI/CD pipelines

SAFe

Job description

Randstad Digital in Washington, DC seeks a Principal Information System Security Officer (ISSO) to embed cybersecurity as a strategic risk advisor across Agile Release Trains and product delivery. You will champion secure-by-design practices and drive secure technical decision-making with business stakeholders and engineering teams.

The role focuses on risk governance, compliance with NIST/FISMA/FedRAMP, and DevSecOps integration across enterprise architectures.