When our country’s cybersecurity is on the line, simply reacting is not enough, we need a plan. And when that plan needs to protect our nation's cybersecurity infrastructure, we need strategic policy development.
Compensation
The projected compensation range for this position is $69,400.00 to $158,000.00 (annualized USD).
Responsibilities
Review client’s current cyber policies and coverage
Assess overall risk and collaborate with stakeholders to develop risk acceptance justifications
Develop strategic cyber roadmap and guide client through risk and availability
Ensure client operates securely in evolving IT environment
Information System Security Officer (ISSO) / Cybersecurity Specialist supporting mission‑critical federal systems for NASA’s Space Communications and Navigation program.
Locations (2)
Washington, District of Columbia, United States
Greenbelt, Maryland, United States
Responsibilities
Serve as the dedicated ISSO across a multi‑system portfolio, managing ongoing Continuous Monitoring (ConMon), assessment preparation, and full Assessment and Authorization (A&A) lifecycles
Develop, update, and maintain comprehensive System Security Plans (SSPs), Risk Assessment Reports (RAR), Contingency Plans, PIA/PTAs, system architecture/network diagrams, and supporting authorization artifacts within RISCS
Manage and track Plans of Action and Milestones (POA&Ms) and Risk‑Based Decisions (RBDs) through remediation and closure
Evaluate vulnerability scan results, identify technical security weaknesses, and coordinate remediation and mitigation actions with engineering, SOC, and systems administration teams
Serve as the dedicated ISSO across a multi-system portfolio, managing ongoing Continuous Monitoring (ConMon), assessment preparation, and full Assessment and Authorization (A&A) lifecycles to achieve and maintain Authorities to Operate (ATO).
Locations (2)
Washington, District of Columbia, United States
Greenbelt, Maryland, United States
Compensation
We invest in the lives of our employees, both in and out of the workplace, by providing competitive pay and benefits packages. Benefits offered may include health care, dental, vision, life insurance; 401(k); education assistance; paid time off including PTO, holidays, and any other paid leave required by law. The salary offered will depend on several factors including, but not limited to, relevant experience, skills, education, geographic location, internal equity, business needs, and other factors permitted by law. Posted pay ranges are a general guideline only and are not a guarantee of compensation or salary.
Responsibilities
Serve as the dedicated ISSO across a multi-system portfolio, managing ongoing Continuous Monitoring (ConMon), assessment preparation, and full Assessment and Authorization (A&A) lifecycles to achieve and maintain Authorities to Operate (ATO).
Develop, update, and maintain comprehensive System Security Plans (SSPs), Risk Assessment Reports (RAR), Contingency Plans, PIA/PTAs, system architecture/network diagrams, and supporting authorization artifacts within RISCS.
Supports a state Medicaid agency’s Enterprise Security & Compliance team by providing cybersecurity governance, risk, and compliance (GRC) support across regulatory assessments, security control validation, audit readiness, documentation management, and remediation activities.
Responsibilities
Support compliance assessments and audit-readiness activities for CMS ARC-AMPE, HITRUST r2, SSA regulatory compliance audits, and other applicable requirements.
Interpret security and compliance requirements, evaluate existing control documentation and implementation, and identify gaps in policies, procedures, standards, and supporting evidence.
Review, update, and develop security policies, standards, guidelines, and related documentation.
Collaborate with agency security analysts and operational teams to develop, document, and improve security procedures.
Identify required objective evidence, evaluate its relevance, completeness, accuracy, and currency, and coordinate with control owners to obtain and maintain supporting artifacts.
Supports a fast‑paced, process‑driven cybersecurity environment by performing quality control and assurance reviews of security assessment documentation.
Responsibilities
Conduct quality control and assurance reviews of information security assessment deliverables
Review security assessment documentation and artifacts associated with Assessment and Authorization efforts
Analyze assessment outputs and provide recommendations to improve quality, consistency, and compliance posture
Develop, maintain, and track complex project schedules, milestones, and work plans
Generate status reports, metrics, dashboards, and other management reporting products
Serve as the primary authority for ensuring mission‑critical space systems and enterprise information systems achieve and maintain authorization to operate in compliance with national security requirements.
Responsibilities
Serve as the primary liaison between system owners, engineering teams, and Government Authorizing Officials (AOs)
Translate security policy into system requirements, manage security authorization packages, and ensure continuous monitoring of security controls
Lead security categorization activities per CNSSI 53, determining appropriate Impact Levels (IL) and establishing control overlays for all national security systems
Develop and maintain system security architecture documentation, including data flow diagrams, security boundary definitions, and control inheritance mappings
Coordinate with system owners and engineering teams to identify security control implementation requirements and validate that technical solutions meet policy mandates
Requirements
BS degree in Computer Science, Cybersecurity, Information Systems, or related technical discipline
Manage and track Plans of Action and Milestones (POA&Ms) and Risk-Based Decisions (RBDs) through remediation and closure.
Evaluate vulnerability scan results, identify technical security weaknesses, and coordinate remediation and mitigation actions with engineering, SOC, and systems administration teams.
Coordinate and conduct annual security control assessments, self-assessments, gap analyses, and contingency plan testing/training.
Requirements
Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, Engineering, or a related field (or equivalent professional experience).
Nice to have: NASA cybersecurity policies
Nice to have: NASA Space Communications and Navigation (SCaN) operations
Cybersecurity Risk AnalystNewBooz Allen Hamilton · Washington, US
Cybersecurity Specialist (ISSO)ASRC Federal · Washington, US+1 more
Information Systems Security Manager (ISSM)Random Bit · Atlanta, US
Information Security Assessment Quality Control AnalystSaliense · McLean, US