ZipRecruiter

Log In

1

Analyst Isso Jobs in Washington (NOW HIRING)

Lynk

Security Analyst / ISSO

Chevy Chase, MD · On-site

... ISSO experience or equivalent accountability preferred. * Deep, working knowledge of NIST SP 800-171 and DFARS 7012. Able to assess, gap-analyze, and evidence all 110 controls independently.

ActioNet

Cybersecurity Analyst (ISSO)

Washington, DC · Hybrid

Performs in-depth analysis in various areas and technologies within NIST Risk Management Framework (RMF) Assessment & Authorization (A&A) process. Implements RMF systems to achieve Authority to ...

ActioNet

Cybersecurity Analyst (ISSO)

Washington, DC · Hybrid

Performs in-depth analysis in various areas and technologies within NIST Risk Management Framework (RMF) Assessment & Authorization (A&A) process. Implements RMF systems to achieve Authority to ...

ActioNet

Cybersecurity Analyst (ISSO)

Washington, DC · Hybrid

Performs in-depth analysis in various areas and technologies within NIST Risk Management Framework (RMF) Assessment & Authorization (A&A) process. Implements RMF systems to achieve Authority to ...

RCG

Cybersecurity Compliance Analyst

Suitland, MD · On-site

$115K - $125K/yr

Cybersecurity Compliance Analyst ISSO Support Continuous Monitoring Security Control Assessments Location: Suitland, MD (Hybrid) Work Schedule: Full-Time Hybrid (3 Days On-Site / 2 Days Telework ...

RCG

Cybersecurity Compliance Analyst

Suitland, MD · On-site

$115K - $125K/yr

Cybersecurity Compliance Analyst ISSO Support | Continuous Monitoring | Security Control Assessments Location: Suitland, MD (Hybrid) Work Schedule: Full-Time | Hybrid (3 Days On-Site / 2 Days ...

kgs

ISSO Analyst

Washington, DC · On-site

The ISSO Analyst will support the security authorization and continuous monitoring activities for SBA information systems, assisting senior ISSO staff and SBA security leadership in ensuring systems ...

Integral

Cloud and Cybersecurity Engineer

Springfield, VA · On-site

$100 - $134/hr

Overview Integral Federal is seeking a Cybersecurity Analyst / ISSO / Cloud Engineer to support the Biometrics Procurement and Sustainment Program. This full-time role combines the Government's half ...

kgs

ISSO Analyst

Washington, DC · On-site

The ISSO Analyst will support the security authorization and continuous monitoring activities for SBA information systems, assisting senior ISSO staff and SBA security leadership in ensuring systems ...

Integral

Cloud and Cybersecurity Engineer

Springfield, VA · On-site

$100K - $134K/yr

Overview Integral Federal is seeking a Cybersecurity Analyst / ISSO / Cloud Engineer to support the Biometrics Procurement and Sustainment Program. This full-time role combines the Government's half ...

Koniag, Inc.

ISSO Analyst

Washington, DC · On-site

The ISSO Analyst will support the security authorization and continuous monitoring activities for SBA information systems, assisting senior ISSO staff and SBA security leadership in ensuring systems ...

Integral

Cloud and Cybersecurity Engineer

Springfield, VA · On-site

$100K - $134K/yr

Integral Federal is seeking a Cybersecurity Analyst / ISSO / Cloud Engineer to support the Biometrics Procurement and Sustainment Program. This full-time role combines the Government's half-time ...

next page

Showing results 1-20

All JobsAnalyst Isso JobsAnalyst Isso Jobs in Washington

Analyst Isso information

What is an analyst ISSO?

Analyst ISSOs, or Information System Security Officers, are professionals responsible for ensuring the security of an organization’s information systems. They analyze, implement, and monitor cybersecurity measures to protect sensitive data and ensure compliance with governmental and industry regulations. Their duties often include conducting risk assessments, developing security policies, and responding to security incidents. Analyst ISSOs play a crucial role in maintaining the confidentiality, integrity, and availability of information systems.

What skills and qualifications are needed to be an analyst ISSO?

To thrive as an Analyst ISSO (Information System Security Officer), a strong background in cybersecurity principles, risk assessment, and compliance frameworks such as NIST or ISO is essential, typically supported by a degree in IT or cybersecurity and relevant certifications like CISSP or Security+. Familiarity with security management tools, vulnerability scanning software, and incident response systems is commonly required. Exceptional analytical thinking, attention to detail, and clear communication skills help in effectively managing security policies and collaborating with cross-functional teams. These skills and qualifications are vital to ensure information systems remain secure, compliant, and resilient against evolving cyber threats.

What challenges does an analyst ISSO face when ensuring compliance with security frameworks?

Analyst ISSOs (Information System Security Officers) often encounter challenges such as keeping up-to-date with evolving cybersecurity regulations and ensuring that all technical and administrative controls are properly documented and implemented. Coordinating with diverse teams, from IT to management, to align security practices and resolve vulnerabilities can be demanding, especially in fast-changing environments. Additionally, balancing strict compliance requirements with operational realities requires strong organizational and communication skills. Despite these challenges, the role offers valuable experience in risk management and is a solid foundation for career advancement in cybersecurity.

What is the difference between Analyst Isso vs Data Analyst?

AspectAnalyst IssoData Analyst
Required CredentialsBachelor's degree in IT, Computer Science, or related field; certifications like SQL, TableauBachelor's degree in Statistics, Mathematics, or related; certifications like Excel, SQL, Tableau
Work EnvironmentTech companies, IT departments, data-driven organizationsBusiness, finance, marketing, healthcare sectors
Employer & Industry UsagePrimarily in tech and IT industriesAcross various industries including finance, marketing, healthcare
Common Search & ComparisonYesYes

Analyst Isso and Data Analyst share similar educational backgrounds and certifications, often working in data-centric environments. However, Analyst Isso typically focuses more on IT systems and infrastructure analysis, while Data Analysts concentrate on interpreting data to inform business decisions. Both roles are essential in their respective fields and often overlap in skills and tools used.

What are popular job titles related to Analyst Isso jobs in Washington?

For Analyst Isso jobs in Washington, the most frequently searched job titles are:

What job categories do people searching Analyst Isso jobs in Washington look for?

The top searched job categories for Analyst Isso jobs in Washington are:

What cities in Washington are hiring for Analyst Isso jobs?

Cities in Washington with the most Analyst Isso job openings:

Analyst Isso jobs near you
Infographic showing various Analyst Isso job openings in Washington as of July 2026, with employment types broken down into 86% Full Time, 8% Part Time, 1% Temporary, and 5% Contract. Highlights an 85% Physical, 6% Hybrid, and 9% Remote job distribution.

Security Analyst / ISSO

Lynk

Chevy Chase, MD • On-site

Full-time

This job post has expired today. Applications are no longer accepted.

Job description

Full-time • Chevy Chase, MD(Hybrid)• US-based • Senior level • Reports to CISO
US citizenship or Lawful Permanent Resident status required. This role involves access to Controlled Unclassified Information (CUI); no security clearance required.
ABOUT LYNK
Lynk is building the world's first global satellite-to-cellular network, enabling direct device-to-device (D2D) connectivity from commercial low Earth orbit (LEO) satellites to standard mobile phones, no special hardware required. We operate in a market alongside other commercial LEO constellations, satellite-direct-to-cellular providers, and large-scale broadband satellite networks, competing for the same spectrum, orbits, and government contracts.
Our technology and network infrastructure are of significant interest to US government and defense customers. Protecting the integrity of that infrastructure and the Controlled Unclassified Information that flows through it is mission critical. That's where you come in.
Role Overview:
Reporting directly to the CISO, you'll own Lynk's cybersecurity compliance program across CMMC Level 2 / NIST SP 800-171, DFARS 7012, SOC 2 Type II, and GDPR. You'll be ISSO for CUI-scoped systems: authoring SSPs, maintaining POA&Ms, running control assessments, and leading C3PAO engagement. Lynk has a functioning security toolset in place including SIEM/log management, EDR, MDM, vulnerability management and IT asset management; your job is to mature and align that stack to CMMC requirements, not start from zero.
Responsibilities:
GRC & Compliance (primary)
  • Own and maintain the System Security Plan (SSP) and Plan of Action & Milestones (POA&M) for all CUI-scoped systems; always keep documentation audit-ready.
  • Assess all 110 NIST SP 800-171 practices for implementation and effectiveness; map existing controls (Wazuh, ThreatDown, Tenable, ManageEngine, AD GPOs, SnipeIT) to CMMC requirements, identify gaps, and drive remediation.
  • Maintain the organizational risk register; support ongoing Risk Management Framework (RMF) processes and report risk posture to the CISO.
  • Lead preparation for CMMC Level 2 assessments - build evidence packages, coordinate with the C3PAO, and manage assessor requests and findings.
  • Develop and maintain cybersecurity policies, procedures, and standards aligned to CMMC, DFARS, SOC 2, and GDPR; ensure version control and staff acknowledgment records are maintained.
  • Define, track, and report security metrics and KPIs to the CISO and non-technical stakeholders including legal, contracts, and business development teams.
  • Support contract teams with DFARS clause requirements, cybersecurity representations, and customer security questionnaires.
  • Conduct vendor and third-party risk assessments; maintain supplier risk documentation.
  • Manage the security awareness training program and phishing simulations; maintain completion records per CMMC requirements.

Security Operations (secondary)
  • Monitor SIEM for security events and alerts relevant to CUI systems; write and tune detection rules; triage and escalate incidents; produce post-incident reports with compliance impact assessment. Leverage audit log aggregation to satisfy CMMC AU (Audit & Accountability) control evidence requirements.
  • Monitor EDR alerts for CUI-scoped endpoints; investigate detections and coordinate response with IT.
  • Work with IT to ensure vulnerability findings are remediated within CMMC-required timeframes, track and report on remediation status.
  • Leverage MDM and Active Directory to enforce device compliance, GPO-based security baselines, and access control policies across CUI-scoped endpoints.
  • Use asset inventory as the authoritative hardware/software asset register for CMMC system boundary documentation; keep it current and audit ready.
  • Conduct periodic access control audits; enforce least-privilege across AD, SSO, and SaaS tooling handling CUI.

Required Skills and Experience:
  • 3-6 years in cybersecurity with a strong GRC or compliance focus; prior ISSO experience or equivalent accountability preferred.
  • Deep, working knowledge of NIST SP 800-171 and DFARS 7012. Able to assess, gap-analyze, and evidence all 110 controls independently.
  • Demonstrated experience authoring SSPs and POA&Ms for government-facing or regulated environments.
  • Familiarity with the CMMC Level 2 assessment process and C3PAO engagement.
  • Hands-on SIEM experience: writing detection rules, querying logs, and generating compliance-grade audit evidence.
  • Hands-on experience with EDR and vulnerability scanning tools in a compliance context. Mapping tool outputs to NIST controls and generating assessor evidence.
  • Working knowledge of SOC 2 Type II and GDPR compliance requirements.
  • Some cloud security fundamentals (AWS preferred). IAM, CloudTrail, GuardDuty, access policies.
  • Clear, structured communicator. Equally comfortable writing formal policy documentation and briefing non-technical executives.
  • US citizenship or Lawful Permanent Resident status.

Nice to Have:
  • CMMC Registered Practitioner (RP) or Professional (CCP)
  • CISSP / CISM / Security+
  • RMF / ATO experience
  • FedRAMP familiarity
  • Space / satellite industry background
  • Telecom or critical infrastructure security
  • Prior C3PAO assessment experience
  • GRC platform experience (Vanta, Drata, Archer, ServiceNow)
  • Scripting in Python or Bash for evidence collection automation
  • Zero-trust architecture

What Lynk Offers:
  • Competitive salary and equity in a company building genuinely novel global infrastructure.
  • Remote-first, US-based role.
  • Direct line to the CISO; your work defines Lynk's compliance posture at a critical growth stage.
  • A functioning security toolset already in place. Your focus is maturing and aligning it, not standing it up from scratch.
  • Learning and certification budget.

ITAR Requirements
To comply with U.S. Government export control regulations (ITAR), applicants must be one of the following: (i) a U.S. citizen or national, (ii) a lawful permanent resident (green card holder), (iii) a refugee under 8 U.S.C. § 1157, or (iv) an asylee under 8 U.S.C. § 1158. Individuals who do not meet these criteria must be eligible to obtain the necessary authorizations from the U.S. Department of State. For more information, please refer to the ITAR guidelines.
Learn about ITAR here.
Lynk is an equal opportunity employer. This position requires US citizenship or Lawful Permanent Resident status due to access to Controlled Unclassified Information.

Apply