Senior ISSO - Secure SDLC, FedRAMP & Cloud Risk Leader

Jobtome; Washington (District of Columbia); On-site; USD 170,000 - 230,000; Full time

Job summary

Jobtome in Washington, DC is seeking a Principal Information Systems Security Officer (ISSO) to lead cybersecurity strategy across enterprise initiatives, aligning security with Agile delivery, SDLC and DevSecOps while meeting NIST, FISMA and FedRAMP requirements.

You will advise senior leadership, oversee risk assessments, review vulnerabilities and guide secure architecture decisions across cloud, containerized and hybrid environments, partnering with engineering and business teams to embed

Qualifications

• Minimum 10+ years of cybersecurity experience with 5+ years in ISSO/Information Assurance or security architecture.
• In-depth knowledge of NIST RMF, NIST SP 800-53 and FISMA with FedRAMP experience.
• Experience delivering security in Agile, SAFe, SDLC and DevSecOps.
• Ability to develop SSPs, RARs, SAPs and POA&Ms and engage with federal compliance.

Responsibilities

• Advise leadership on cybersecurity risks, compliance gaps and mitigations.
• Review vulnerabilities and support risk-based decisions.
• Evaluate secure architectures for cloud, container, and hybrid setups.
• Support DevSecOps, continuous monitoring and secure config.
• Ensure compliance with NIST SP 800-37, 800-53, FISMA and FedRAMP.
• Develop security docs: SSPs, RARs, SAPs, POA&Ms.
• Partner with engineering and business teams to mitigate risks.
• Embed secure-by-design practices in SDLC, Agile, SAFe.
• Lead risk assessments, threat modeling and security reviews.

Skills

Stakeholder management

Cybersecurity advisory

Security risk assessments

Vulnerability management

Threat modeling

Cloud security (AWS/Azure/GCP)

Agile/SAFe/DevSecOps

SSP/RAR/SAP/POA&Ms

FedRAMP

NIST RMF/NIST SP 800-53/FISMA

ISSO/Information Assurance

10+ years cybersecurity

5+ years in ISSO/security architecture

Job description

Jobtome in Washington, DC is seeking a Principal Information Systems Security Officer (ISSO) to lead cybersecurity strategy across enterprise initiatives, aligning security with Agile delivery, SDLC and DevSecOps while meeting NIST, FISMA and FedRAMP requirements.

You will advise senior leadership, oversee risk assessments, review vulnerabilities and guide secure architecture decisions across cloud, containerized and hybrid environments, partnering with engineering and business teams to embed