Lead Senior Information System Security Officer
$90,300–$189,600 year
On-siteNational Harbor, Maryland, United States or Washington, United States
Job Summary
Execute complete Risk Management Framework (RMF) activities for Authority to Operate (ATO) decisions, including system categorization, control selection, self-assessments, POA&M development, and continuous monitoring. Lead a team of 13 ISSOs while developing and maintaining System Security Plans, Configuration Management Plans, and Contingency and Incident Response Plans. Conduct Security Impact Analyses, approve Change Requests, and manage access controls for system and physical facilities. Generate required deliverables such as Security Test Plans, Risk Assessment Reports, and Weekly/Monthly Program Reports to track compliance with FISMA, NIST, and DHS directives. Advise system owners and senior executives on cybersecurity matters and remediation work plans.
Required Qualifications
- U.S. Citizenship
- BS/BA + 15 years of applicable experience in information security
- Must have one of the following Information Assurance Technician (IAT) Level III qualifications: - Certified Information System Security Professional (CISSP) - Certified Information Security Manager (CISM) - CompTIA Advanced Security Practitioner (CASP+)
- 10+ years of experience in information security
- Demonstrated expertise in RMF, Information
Desired Qualifications
- FEMA EOD suitability
- Current DHS or FEMA EOD
- Active Secret security clearance
- Previous DHS or DoD experience
- Experience with CSAM, RegScale, eMASS, or similar GRC tools
- Experience supporting emergency operations or disaster response missions
- Knowledge of cloud security and FedRAMP authorization processes
- Experience with continuous monitoring and automated security tools
- Strong communication skills for presenting to senior leadership
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.