Information Systems Security Officer

Overview: GovCIO is currently hiring for a Senior Information Systems Security Officer (ISSO) to support our client's contract needs. The Senior ISSO conducts Assessment and Authorization (A&A) activities with responsibility for the full RMF lifecycle from initial categorization through continuous monitoring. This role requires demonstrated expertise managing complex, concurrent assessments - including emerging technology systems such as AI/ML platforms - operating under NIST SP 800-53 Rev 5, CNSSI 1253, and applicable policies. The Senior ISSO provides mentorship to junior ISSO staff. This position is based in Washington, DC and is eligible for 100% remote work.

Responsibilities: Support and execute all phases of the NIST SP 800-37 RMF lifecycle including categorization, control selection, implementation, assessment, authorization, and continuous monitoring across multiple concurrent systems and network environments Develop, maintain, and update RMF documentation including System Security Plans (SSPs), Security Assessment Reports (SARs), Security Assessment Plans (SAPs), POA&Ms, Contingency Plans, Incident Response Plans, Risk Assessment documentation, and interconnection agreements Conduct multiple concurrent RMF assessments simultaneously, maintaining compliance documentation in JCAMAssess and authorize emerging technology systems - including AI/ML platforms - adapting NIST SP 800-53 Rev 5 control baselines to novel system types where standard guidance requires augmentation Manage evidence collection, control traceability documentation, and Body of Evidence (BOE) packages for assessments, audits, and compliance reviews Establish system impact levels following FIPS 199 for confidentiality, integrity, and availability; conduct and document Privacy Impact Assessments (PIAs) and Privacy Threshold Analyses (PTAs) Review and analyze vulnerability results using Tenable Security Center; create, track, and manage POA&M remediation activities through closure; validate scan completeness before Security Control Assessor review Provide security reporting, dashboards, and status updates to system owners and stakeholders; support development and maintenance of security metrics and scorecard reporting Ensure systems comply with FISMA, NIST SP 800-53 Rev 5, CNSSI 1253, OMB A-130, and applicable client cybersecurity policies Manage assessment workflow and task tracking using JIRA; maintain accurate status visibility across multiple concurrent assessment pipelines Mentor junior ISSO staff; develop SOPs, work instructions, and process documentation to improve team