Information Systems Security Officer (Federal Program)

Interested in working in an innovative, collaborative environment with motivated, social people? At Arc Aspicio, you can join a leading consulting firm that specializes in human capital, data analytics, management, and strategy professional services to deliver compelling solutions. Consultants join our practice focused on mission-critical projects and quickly learn to contribute to and grow our company across multiple projects. We invest in hiring, mentoring, and training smart, diverse, and self-driven professionals interested in all aspects of the company and our homeland security and Government clients. We are looking for people who are willing to share ideas and work as part of a collaborative, innovative team.

Arc Aspicio is currently working in a hybrid work environment where work will be performed at client sites, the Arc Aspicio DC office, and remotely. All candidates must live in the Washington, DC area at the time of employment.

Responsibilities

• Serve as the primary security point of contact for assigned federal information systems
• Develop, implement, and maintain System Security Plans (SSPs) in accordance with NIST SP 800‑53, RMF, and agency‑specific requirements
• Ensure continuous compliance with FISMA, FedRAMP, and organizational security policies
• Support system Authorization to Operate (ATO) activities, including initial authorizations, renewals, and continuous monitoring
• Conduct security control assessments and analyze system risks to confidentiality, integrity, and availability
• Identify security vulnerabilities and manage remediation efforts through Plans of Action and Milestones (POA&Ms)
• Collaborate with system owners and engineers to implement risk‑based security controls
• Provide security guidance during system development, modernization, and operational phases
• Execute and maintain continuous monitoring programs, including vulnerability scanning, log review, and control validation
• Review and analyze scan results (e.g., Nessus, Tenable) and track remediation progress
• Monitor compliance artifacts and evidence to support audits, inspections, and assessments
• Support cybersecurity incident response activities, including investigation, documentation, and reporting
• Ensure timely reporting of incidents in accordance with federal and agency procedures
• Work with ISSMs, program managers, and federal customers
• Collaborate with our clients to solve tough problems, delivering outstanding client service, and achieving mission results
• Apply excellent consulting, business analysis, and communications skills to quickly identify problems, analyze challenges, and recommend solutions to our team and our clients

Required Qualifications

• At least 5 years of direct ISSO experience in overseeing and interacting within a portfolio of security assets and systems at a Government-program level that involves multiple systems and facilities
• Direct experience with senior clients and stakeholder engagement and delivering work products for clients in a complex environment
• Proven to be flexible and thrive in a dynamic, ambiguous, and complex work environment and manage multiple tasks and projects simultaneously
• Outstanding written and oral communication and collaboration skills and strong leadership potential
• Ability to collaborate and work effectively remotely and in-person
• Technologically savvy, especially with Microsoft products and use of collaboration tools like SharePoint
• Desire to join a consulting firm and learn business concepts; loves to collaborate and reach out to get involved in company events, offerings, and special projects
• Ability to work in the Washington, DC metro area and travel to different locations
• Clearance: US Citizenship only (no dual citizenship) 
• Education: Bachelor’s degree
• Critical Skills: Executive presence, entrepreneurial spirit, strong work ethic, collaborative mind-set, excellent problem-solving skills, and interest in working in a consulting firm. Interest in working on assignments outside of one project is strongly desired