Information System Security Officer

Supporting a large federal agency's Assessment and Authorization (A&A) program, the full-time remote Information System Security Officer will manage security assessments across various applications and domains, implement security controls, and serve as a subject matter expert in risk management and compliance processes. Key responsibilities Manage security assessments for complex projects, including cloud computing environments Implement security controls and conduct risk assessments in alignment with NIST RMF and ISO standards Serve as a subject matter expert, guiding stakeholders and supporting A&A documentation and accreditation activities Required qualifications Bachelor's degree in a related field or four additional years of relevant experience in lieu of a degree Demonstrated experience managing security assessments across multiple applications and systems Hands-on experience with security controls, risk assessments, and compliance documentation aligned to NIST RMF and ISO standards Experience using Governance, Risk, and Compliance (GRC) tools to manage A&A processes U.S. Citizenship or Permanent Residency, with the ability to obtain and maintain a Public Trust security clearance