Senior Information Systems Security Officer

Senior Information Systems Security Officer

Candidates must be U.S. citizens able to obtain and/or maintain a Department of Defense security clearance as a condition and continuation of employment.

Location: Newington, Virginia (Onsite)

Role Overview

An opportunity is available for a Senior Information Systems Security Officer to support Risk Management Framework (RMF) activities. This role involves directing RMF initiatives, ensuring high-quality authorization packages, and driving sustained compliance with cybersecurity requirements.

Key Responsibilities

• Work with the team on portfolio-level RMF strategy and execution for multiple systems and enclaves.
• Utilize technical and soft skills to manage the development, review, and approval of authorization artifacts such as SSP, SAP/SAR, POA&M, Risk Register, and Continuous Monitoring Strategy.
• Craft risk statements and decision materials in a fast-paced environment.
• Implement quality gates, metrics, and dashboards for executive communication.
• Utilize results from vulnerability scans, security benchmarks, and configuration audits to resolve findings.

Required Qualifications

Clearance: Candidates must be able to obtain and/or maintain a TS/SCI security clearance as a condition and continuation of employment

Education: Bachelor's degree in Cybersecurity, Information Systems, Computer Science, Engineering, or a related field.

Experience: 8+ years of related experience.

Technical Skills:

• Expert-level knowledge of RMF lifecycle and A&A documentation (SSP, SAP/SAR, POA&M, Continuous Monitoring Strategy, Risk Register).
• Mastery of RMF tooling for package management, control inheritance, workflow, and audit readiness.
• Hands-on control assessment and validation against NIST SP 800-53; familiarity with related industry directives.
• Enterprise vulnerability management using tools like ACAS/Nessus and configuration baselines.
• Executive-level writing and briefing skills.
• Security+ certification.

Preferred Qualifications

• CISM, CISSP, or CCSP certification.
• Experience with cloud A&A (AWS, Azure) at various levels.
• Experience establishing Continuous Monitoring programs and dashboards; familiarity with control overlays and tailoring.

Work Environment

The role involves working with a team on RMF strategy and artifact quality, coordinating assessments, guiding remediation, and mentoring analysts. The environment is highly team-based with cross-functional collaboration.

Everforth Apex is a world-class IT services company that serves thousands of clients across the globe. When you join Everforth Apex, you become part of a team that values innovation, collaboration, and continuous learning. We offer quality career resources, training, certifications, development opportunities, and a comprehensive benefits package. Our commitment to excellence is reflected in many awards, including ClearlyRateds Best of Staffing® in Talent Satisfaction in the United States and Great Place to Work® in the United Kingdom and Mexico.