Information System Security Officer (ISSO) at Digital Consultants, LLC

Rockville, Maryland, United States -

Full Time

Start Date

Immediate

Expiry Date

11 Jun, 26

Salary

150000.0

Posted On

13 Mar, 26

Experience

5 year(s) or above

Remote Job

Yes

Telecommute

Yes

Sponsor Visa

Skills

RMF, Cybersecurity Compliance, NIST, System Security Plans, Privacy Impact Assessments, FIPS-199, POA&M, Authorization To Operate (ATO), Continuous Monitoring, Security Control Validation, Security Assessments, Audit Readiness, FISMA Compliance, Security Risk Assessments, Documentation, Analytical Skills

Industry

Information Technology & Services

Description

Description Leading with our people, Digital Consultants’ mission is to deliver the highest level of professional solutions while being a trusted partner and advisor to our customers. With a culture of practicality, opportunity, and creativity, we remain dedicated to being honest, trustworthy, respectful, and ethical in everything we do. We are a certified SBA 8(a) small, disadvantaged business that supports multiple IT customers within the Federal, civilian, and private sectors. Digital Consultants also offers our employees growth opportunities, competitive wages, and a full benefits package. Our founding principles, Fairness and Common Sense, make working here more than a job; it’s the Digital family. Digital Consultants seeks an Information System Security Officer (ISSO) to support the NCATS Cybersecurity Support Services (CSS) contract. The ISSO will support the implementation and management of cybersecurity compliance activities across NCATS information systems and research platforms. The ISSO will work closely with system owners, cybersecurity engineers, and NIH security stakeholders to ensure systems meet federal cybersecurity requirements and maintain Authorization to Operate (ATO) under the NIST Risk Management Framework (RMF). Support implementation of the NIST Risk Management Framework (RMF) lifecycle across NCATS systems. Develop and maintain cybersecurity documentation including: System Security Plans (SSP) Privacy Impact Assessments (PIA) FIPS-199 security categorizations Plan of Action and Milestones (POA&M) Coordinate preparation of security authorization packages supporting ATO decisions. Support continuous monitoring activities, including documentation updates and security control validation. Assist in conducting security assessments and audit readiness activities. Coordinate with NCATS system owners, developers, and cybersecurity personnel to ensure compliance with federal security policies. Support development of privacy compliance documentation and security risk assessments. Track remediation of vulnerabilities and compliance findings. Assist in preparing systems for security control assessments and authorization reviews. Provide documentation and reporting support for cybersecurity governance and compliance initiatives. Requirements Clearance: Public Trust or ability to obtain a Public Trust Clearance. Certifications: CAP or CISSP preferred. Security+, CEH, GSEC, SSCP or similar certification required. Education: Bachelor's Degree in Cybersecurity, Information Assurance, Computer Science, or related field. Experience: 6–8 years of experience supporting RMF and federal cybersecurity compliance programs. Experience supporting security authorization packages and continuous monitoring activities. Experience supporting federal cybersecurity programs implementing NIST security frameworks. Experience supporting NIH, HHS, or federal civilian agencies preferred. Experience supporting NIST RMF lifecycle implementation. Knowledge of NIST SP 800-53 security controls and federal cybersecurity compliance requirements. Experience preparing and maintaining RMF artifacts including SSP, PIA, FIPS-199, and POA&M documentation. Understanding of FISMA compliance and federal cybersecurity frameworks. Experience supporting security assessments and audit preparation. Strong analytical and documentation skills. Ability to coordinate across technical teams, system owners, and cybersecurity leadership. Physical Requirements: The candidate must be able to travel to other worksites as required and with or without reasonable accommodation, be able to sit, stand, use computers and monitors, and perform duties in an office environment for extended periods. The candidate must be able to lift up to 40 lbs. on occasion (e.g., moving a case of paper or similar task) that may occur occasionally. Compensation and Benefits: The salary range for this position is $115,000 – 150,000, depending on experience. The company offers the following benefits to permanent, full-time employees: Paid Time Off (PTO) Group health plans Income protection and supplemental benefits 401(k) plan with company matching Health Savings Account (HSA) Flexible Spending Account (FSA) Pet insurance options Employee Assistance Program (EAP) Digital Consultants, an inclusive and welcoming company, is fully committed to hiring and retaining a diverse workforce without regard to race, color, religion, sex (including pregnancy, gender identity, and sexual orientation), genetic information, national origin, age (40 or older), disability, veteran status or any other protected characteristic. We provide reasonable accommodation to individuals who require assistance at any stage of the employment process. If you need assistance navigating Digital Consultants' job openings or applying for a position, please email recruiting@digiconintl.com or call 571-306-3444. Please provide your contact information so we can assist you.

Responsibilities

The ISSO will support the implementation and management of cybersecurity compliance activities across NCATS information systems and research platforms, ensuring systems meet federal requirements and maintain Authorization to Operate (ATO) under the NIST Risk Management Framework (RMF). This includes developing and maintaining key cybersecurity documentation such as SSPs, PIAs, and POA&Ms, and tracking the remediation of vulnerabilities.