Information Systems Security Officer Job

We are building a team for one of the U.S. Federal Government's largest technology modernization programs, underpinning the U.S. capital markets.

Built on AWS and leveraging an AI-powered software engineering platform, this program offers a unique opportunity to gain hands-on experience with next-generation AI, Agentic AI, cloud technologies, and AI-driven engineering.

If you are looking for technically challenging work, exceptional learning, and a résumé-defining opportunity with national impact, I would love to connect.

Job Title:
ISSO

Position Type:
Full-Time

Location:
Hybrid (2 days onsite)

Days Remote:
3 days remote

Position Summary:
The Developer serves as the Information System Security Officer responsible for maintaining the security posture, compliance, and authorization status of a large-scale federal information system. This role manages the Risk Management Framework lifecycle, maintains the system’s Authority to Operate documentation, and coordinates continuous-monitoring activities. The Developer works closely with client security leadership, security teams, and DevSecOps personnel to ensure continued compliance with NIST SP 800-53, FedRAMP, and applicable federal information-security requirements.

Key Responsibilities:
1. Maintain the system’s Risk Management Framework documentation and Authority to Operate package.
2. Manage and maintain security-control implementation evidence aligned with NIST SP 800-53 and FedRAMP requirements.
3. Track security findings and coordinate remediation activities through Plans of Action and Milestones.
4. Manage continuous-monitoring documentation, evidence, and reporting activities.
5. Support security assessments, compliance audits, system authorization reviews, and related security activities.
6. Coordinate with the client Information System Security Manager, security teams, and DevSecOps personnel on security and compliance requirements.
7. Review proposed system changes to assess potential security impacts.
8. Maintain approved system-security configurations and security baselines.
9. Report the system’s security posture, risks, findings, and incidents to program leadership and client stakeholders.

Minimum Experience:
1. 5+ years of information-system security or Information System Security Officer experience.
2. Experience supporting federal Risk Management Framework and Authority to Operate processes.
3. managing continuous-monitoring activities and Plans of Action and Milestones.

Mandatory Skills:
1. Information System Security Officer experience.
2. Federal information system security.
3. Risk Management Framework.
4. Authority to Operate processes and documentation.
5. NIST SP 800-53 security controls.
6. Security-control implementation and evidence management.
7. Continuous monitoring.
8. Plan of Action and Milestones management.
9. Security assessments and audits.
10. Security authorization activities.
11. Security-baseline management.
12. Security risk and incident reporting.
13. CISSP, CAP, or an equivalent security certification.
14. U.S. work authorization.
15. Ability to obtain a Public Trust clearance.

Nice-to-Have Skills:
1. FedRAMP experience.
2. AWS cloud-security experience.
3. Financial-regulatory and security experience.
4. Security automation experience.
5. Governance, Risk, and Compliance tooling experience.

Pay Rate Range:
$200,000–$220,000

Degrees and Certifications:
Required
CISSP, CAP, or an equivalent security certification.