This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Lead Information Systems Security Officer (ISSO) based in the United States.
This role sits at the core of a federal cybersecurity program, responsible for safeguarding sensitive systems and ensuring continuous authorization readiness in a highly regulated environment. You will lead end-to-end security compliance efforts across system boundaries, driving risk management, documentation, and control enforcement. Acting as a key authority on security posture, you will coordinate across engineering, compliance, and operational teams to maintain audit readiness and strengthen system resilience. The position combines hands-on technical security oversight with strategic governance responsibilities. You will play a central role in identifying vulnerabilities, managing remediation plans, and ensuring alignment with federal standards. This is a high-impact opportunity for a security leader who thrives in structured, mission-driven environments and values precision, accountability, and operational excellence.
Accountabilities:
- Lead and oversee the organization’s information security posture for federal systems, ensuring continuous authorization, compliance readiness, and alignment with regulatory requirements from U.S. Department of Homeland Security frameworks and related federal standards.
- Manage security authorization activities including POA&Ms, risk acceptance documentation, system assessments, and annual reviews to ensure ongoing compliance and timely remediation of vulnerabilities.
- Coordinate across Privacy, IT, Records, Engineering, and Governance teams to ensure security requirements are embedded into system design, configuration management, and development lifecycles (Agile, DevSecOps, Waterfall).
- Conduct vulnerability management, ISVM response, patch tracking, contingency planning, and system self-assessments to proactively reduce security risk exposure.
- Support internal and external audits (FISMA, A-123, financial, DHS-related reviews) across all phases, ensuring documentation accuracy and audit readiness.
- Maintain system inventory, compliance documentation, and reporting dashboards while ensuring accurate tracking of security metrics and operational risk indicators.
Requirements:
This role requires deep expertise in federal cybersecurity operations, with a strong ability to balance technical security execution and compliance leadership in complex environments. The ideal candidate brings 8+ years of experience in information security, including hands-on responsibility for security authorization, vulnerability management, and regulatory compliance programs. You should have strong knowledge of federal security frameworks, privacy requirements, and cloud security practices, along with experience working across cross-functional teams in high-stakes environments.
- 8+ years of experience in information security, cybersecurity operations, or security governance roles.
- Strong expertise in vulnerability management, security scanning tools, and federal compliance frameworks.
- Experience supporting security authorization, audit readiness, and continuous monitoring programs.
- Knowledge of federal data privacy requirements and cloud security best practices.
- One or more relevant certifications (e.g., Security+, CISSP, CISM, CCSP, or equivalent cloud security credentials).
- Strong communication skills with the ability to manage stakeholders and explain complex security risks clearly.
- Eligibility to obtain and maintain a DHS Public Trust clearance.
Benefits:
- Competitive base salary with annual performance bonus eligibility
- Comprehensive medical, dental, and vision insurance options
- Health savings account (HSA) employer contributions
- Paid vacation, floating holidays, and federal holidays
- Flexible work arrangements with remote-friendly structure
- Parental leave and family support benefits
- Mental health support and wellness resources
- Professional development support, including training and certification reimbursement
- Internet and technology support benefits
- Retirement savings plans (401k) with employer match