Lead Information System Security Officer (Lead ISSO)

• Eligible to obtain and maintain a Tier 4 High-Risk Public Trust
• Prior Federal Public Trust, Secret, or higher clearance preferred.

Position Summary
vTech is seeking an experienced Lead Information System Security Officer (Lead ISSO) to support a federal civilian cybersecurity program. The Lead ISSO will serve as the primary cybersecurity lead responsible for Risk Management Framework (RMF) execution, Authorization to Operate (ATO) support, Continuous Monitoring (ConMon), POA&M management, audit readiness, cybersecurity governance, and overall contract technical execution. The individual will serve as the primary interface with Government stakeholders including ISSMs, Authorizing Officials (AOs), System Owners, Security Control Assessors (SCAs), and cybersecurity leadership.
Key Responsibilities
Cybersecurity Governance & Leadership

• Lead cybersecurity program execution across multiple federal information systems.
• Provide technical leadership for RMF, FISMA, NIST 800-53, and Zero Trust initiatives.
• Coordinate with Authorizing Officials, ISSMs, System Owners, Privacy Officers, and cybersecurity stakeholders.
• Present cybersecurity posture reports, risk briefings, and executive dashboards.
• Participate in Change Control Boards (CCB), Enterprise Review Boards (ERB), and cybersecurity governance meetings.

Risk Management Framework (RMF)

• Lead all RMF lifecycle activities including:
  • Prepare
  • Categorize
  • Select
  • Implement
  • Assess
  • Authorize
  • Monitor
• Maintain ATO packages and authorization documentation.
• Support ongoing authorization and reauthorization activities.
• Manage SSPs, SAPs, SARs, POA&Ms, and authorization artifacts.

Continuous Monitoring & Compliance

• Oversee Continuous Monitoring (ConMon) activities.
• Monitor system security posture, vulnerabilities, compliance, and risk trends.
• Ensure audit readiness and evidence management.
• Support FISMA, OIG, GAO, and independent assessments.
• Coordinate annual security reviews and control assessments.

Vulnerability & POA&M Management

• Lead vulnerability management strategy.
• Review vulnerability scan results and remediation status.
• Oversee POA&M lifecycle management and reporting.
• Coordinate remediation activities with operations and engineering teams.
• Brief leadership on aging vulnerabilities and compliance risks.

Security Documentation

• Oversee development and maintenance of:

SSPs
ISCM Plans
Incident Response Plans
Contingency Plans
Privacy Documentation
Security Assessments
Security Impact Analyses

• Ensure all artifacts remain audit-ready and compliant.

Required Qualifications
Education

• Bachelor's Degree in Cybersecurity, Information Systems, Computer Science, Engineering, or related field.

Experience

• Minimum 10 years of Information Security experience.
• Minimum 5 years serving as:
  • ISSO
  • ISSM
  • Cybersecurity Lead
  • Security Compliance Manager
• Experience supporting Federal Civilian Agencies.
• Demonstrated expertise with:
  • FISMA
  • NIST RMF (800-37)
  • NIST 800-53 Rev 5
  • FedRAMP
  • Continuous Monitoring
  • ATO Management
  • Audit Readiness

Technical Experience
Experience with:
CSAM / eMASS / XACTA
ServiceNow
Splunk
Microsoft Azure Government
Microsoft 365 GCC/GCC High
Microsoft Defender Suite
Tenable Nessus
Qualys
Entra ID
Palo Alto
Zscaler
Okta
Required Certifications
One or more of:

• CISSP (Preferred)
• CAP
• CISM
• GSLC
• Security+

Preferred Qualifications

• Previous Federal ISSO Lead experience.
• Experience supporting Moderate and High FISMA Systems.
• Knowledge of Zero Trust Architecture initiatives.
• Experience supporting CIO, CISO, and Authorizing Officials