Information System Security Officer (ISSO)

Responsibilities

• Support assigned information systems through all phases of the Risk Management Framework (RMF) lifecycle
• Maintain System Security Plans (SSPs), security documentation, and authorization artifacts
• Coordinate with System Owners to ensure security requirements are incorporated into system operations
• Collect, organize, and validate evidence supporting security control implementation and continuous monitoring
• Track vulnerabilities, POA&Ms, remediation activities, and risk acceptance decisions
• Coordinate with vulnerability management, penetration testing, and incident response teams
• Support annual assessments, Security Control Assessments (SCAs), audits, and authorization reviews
• Monitor system changes to identify potential impacts to authorization status
• Assist with contingency planning, incident response planning, and privacy documentation
• Prepare recurring authorization status reports and security summaries for Government stakeholders
• Participate in change management, configuration management, and governance meetings
• Coordinate closely with engineering teams to ensure security controls are properly implemented

Requirements

• Bachelor's degree in Cybersecurity, Information Systems, IT, Computer Science, or related discipline
• 3+ years of experience supporting Federal cybersecurity, RMF, or A&A programs
• Working knowledge of NIST SP 800-37, NIST SP 800-53 Rev. 5, and FISMA
• Experience supporting authorization package development and maintenance
• Experience coordinating with System Owners, engineers, and Government stakeholders
• Strong technical writing and analytical skills

Preferred Qualifications

• Experience supporting NIH, HHS, or other Federal civilian agencies
• Experience using JCAM, eMASS, ServiceNow GRC, or Archer
• Experience with continuous monitoring, vulnerability management, and POA&M management
• Familiarity with cloud environments and Zero Trust initiatives
• Certifications such as Security+, CGRC, CAP, CISSP, or CISM

Benefits

• Competitive salary
• 100% of medical premiums covered
• 3 weeks of PTO and 11 paid holidays
• 401k with 100% match on the first 4%
• Monthly reimbursement for cell phone and home internet
• Paternity/Maternity Leave
• Investment in training and certifications

About the Company

True Zero Technologies is a veteran-owned small business dedicated to the purposeful enablement of people and technology. Recognized as a Best Place to Work and an Inc. 5000 fastest-growing company, True Zero focuses on delivering top-tier services through a people-first approach.