Senior ISSO (Information System Security Officer)

Job Title: Senior ISSO (Information System Security Officer)
Location: Washington, DC (Hybrid 3-days onsite; core hours 7:00 AM to 6:00 PM ET)
Clearance Required: Must be able to obtain and maintain a Public Trust
Salary: $100K-120K
Application Deadline: July 31, 2026

To apply, please follow these steps:

• Visit https://ibsscorp.com/careers/
• Select the position you are interested in
• Review the job details, then click Apply Now
• Complete and submit your application

Description:
Background
IBSS supports a U.S. federal agency's cybersecurity program in Washington, DC, providing Information System Security Officer (ISSO) support across the system authorization lifecycle. The environment is a hybrid, Zero-Trust-aligned Microsoft Azure and Microsoft 365 enterprise supporting approximately 800 users and 32 information systems operating under FISMA, OMB Circular A-130, and applicable NIST guidance. Authorization artifacts are maintained in a Governance, Risk, and Compliance (GRC) system of record; security telemetry is centralized in a SIEM; and IT service management runs on an enterprise ITSM platform. These roles deliver RMF and authorization support, continuous monitoring, vulnerability and POA&M execution, security documentation, security impact analysis, incident-response coordination, and audit and compliance support - advising and preparing while the Government retains all authorization and risk decisions.

The Senior ISSO performs hands-on ISSO support for assigned systems and is qualified to assume Lead ISSO duties during the Lead's absence, maintaining continuity of ISSO operations.

Responsibilities:

1. RMF and authorization execution
Perform RMF and authorization support for assigned systems: author and maintain SSPs, control implementation and inheritance records, and assessment evidence in the GRC system of record.
Coordinate with the ISSM, System Owners, and assessors on authorization and ongoing-authorization activities.

2. Continuous monitoring and vulnerability/POA&M
Execute continuous monitoring and security-posture management, reconciling GRC records with SIEM telemetry.
Perform vulnerability management and POA&M execution: track findings, distinguish false positives with documented rationale, coordinate remediation, and maintain closure evidence within timelines.

3. Documentation, change, incident, and audit
Maintain current, consistent, audit-ready security documentation in the GRC system of record.
Support security impact analyses and change coordination, incident-response coordination, and audit, assessment, and compliance activities.

4. Continuity
Maintain proficiency in the agency's authoritative tools and be prepared to assume Lead ISSO duties without service degradation.
Respect the advisory boundary; support and recommend while the Government retains all decisions.

Education
Bachelor's degree with minimum 7+ years of experience in cybersecurity, information technology, information systems, or a related field.

Key Technical Skills
Frameworks and policy: RMF (NIST SP 800-37), NIST SP 800-53/53A, NIST SP 800-137, FISMA, OMB Circular A-130, FIPS 199.
GRC and authorization: CSAM (or comparable) for SSPs, POA&Ms, control implementation and inheritance, assessment evidence.
Monitoring and vulnerability: Splunk; Tenable Nessus or Qualys; Microsoft Defender.
Platforms and identity: Azure and M365 (incl. Azure Government, GCC/GCC High), Entra ID, Okta; Intune/BigFix.
ITSM and network: ServiceNow; Palo Alto Panorama; Zscaler.

Desired / Preferred Qualifications
Professional certifications such as CISSP, CGRC (formerly CAP), CISM, Security+, or equivalent.
Prior experience as a federal ISSO supporting FISMA-Moderate systems, RMF, continuous monitoring, and POA&M management.
Hands-on experience with a federal GRC/authorization system (e.g., CSAM), Splunk, Tenable Nessus or Qualys, and ServiceNow.
Prior experience supporting a federal CFO Act agency or similar cybersecurity program.


About IBSS Corp.

Since 1992, IBSS, a woman-owned small business, has provided transformational consulting services to the Federal defense, civilian, and commercial sectors. Our services include cybersecurity and enterprise information technology, environmental science and engineering (including oceans, coasts, climate, and weather), and professional management services.

Our approach is to serve our employees by investing in their growth and development. As a result, our employees bring greater capabilities and provide exceptional service to our clients. In addition to creating career development opportunities for our employees, IBSS is passionate about giving back to the community and serving the environment. We strive to leave something better behind for the next generation.

We measure our success by the positive impact we have on our employees, clients, partners, and the communities we serve. Our tagline, Powered by Excellence, is a recognition of the employees that make up IBSS and ensures we deliver results with quality, applying industry best practices and certifications.

IBSS offers a competitive benefits package that includes medical, dental, vision, and prescription drug coverage with a company-paid deductible, paid time off, federal holidays, a matching 401K plan, tuition/professional development reimbursement, and Flex-Spending (FSA)/Dependent Care Account (DCA) options.

IBSS is an affirmative action and equal opportunity employer. All qualified applicants will be considered for employment without regard to race, color, religion, sex, disability, age, sexual orientation, gender identity, national origin, veteran status, or genetic information. Click https://www.eeoc.gov/poster to see that the EEO is the law. Please direct any inquiries to the HR Department email at HR@ibsscorp.com.

If you require reasonable accommodation in completing this application, interviewing, completing any pre-employment testing, or otherwise participating in the employee selection process, please direct your inquiries to the Talent Acquisition department at Recruiting@ibsscorp.com