Information Systems Security Officer (ISSO - 1677
Quick Summary
Navigate the system through the 6-step Risk Management Framework (RMF) lifecycle in accordance with FISMA requirements. Conduct daily, weekly, and monthly continuous monitoring activities,
The salary offered within this range will depend on the candidate's relevant experience, qualifications, and security clearance.
Responsibilities
~1 min read- →Navigate the system through the 6-step Risk Management Framework (RMF) lifecycle in accordance with FISMA requirements.
- →Conduct daily, weekly, and monthly continuous monitoring activities, including audit log reviews and account management audits.
- →Coordinate with system administrators to apply security hardening guidelines (e.g., DISA STIGs, CIS Benchmarks) and track the remediation of vulnerability scan results.
- →Develop, maintain, and update critical security documentation, including System Security Plans (SSPs) and Plan of Action & Milestones (POA&Ms).
- →Gather and track artifacts and evidence to prove control compliance for internal and external audits.
- →Utilize and maintain records within government Governance, Risk, and Compliance (GRC) systems (e.g., eMASS, Xacta, CSAM, or Archer).
- →Report security incidents or unauthorized activities immediately to the ISSM and appropriate incident response teams.
- Professional experience in Information Assurance, cybersecurity compliance, or systems administration.
- Deep understanding of the RMF process (NIST 800-37) and NIST 800-53 security controls.
- Familiarity with agency-specific control overlays and policies (e.g., CNSSI 1253 for the IC, DHS 4300A, or DoD SRGs).
- Experience with vulnerability scanning and auditing tools (e.g., Tenable/Nessus/ACAS, Qualys, Splunk).
- Excellent problem-solving and analytical skills to track complex security issues.
- Demonstrated hands-on experience in Agile delivery models (ex. SCRUM, Kanban, SAFe) and a DevSecOps framework.
- Experience working alongside DevSecOps and IT operations teams.
- Familiarity with zero-trust network principles.
Nice to Have
~1 min read- DoD 8140/8570 IAM/IAT Level II certification (e.g., Security+ CE, CAP/CGRC, or CySA+)
Global InfoTek, Inc. is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, or protected veteran status.
About Global InfoTek, Inc. Global InfoTek Inc. has an award-winning track record of designing, developing, and deploying best-of-breed technologies that address the nation's pressing cyber and advanced technology needs. GITI has rapidly merged pioneering technologies, operational effectiveness, and best business practices for over two decades.
Location & Eligibility
About this job
- Who can apply
- United States
- Posted
- Today
Listing Details
- First seen
- October 29, 2026
- Last seen
- October 29, 2026
Posting Health
- Days active
- 0
- Repost count
- 0
- Trust Level
- 58%
- Scored at
- October 29, 2026
Signal breakdown
Similar Governance Risk and Compliance Manager jobs
View all →Browse Similar Jobs
Stay ahead of the market
Get the latest job openings, salary trends, and hiring insights delivered to your inbox every week.
No spam. Unsubscribe at any time.
