ZipRecruiter

Log In

1

Isso Consultant Jobs (NOW HIRING)

Athena Technology Group

ISSO Lead

Washington, DC ยท On-site

... Communications consulting, system engineering, integration, deployment and operation of ... Monitor the implementation of security controls and report the effectiveness to the ISSO and AOs.

New

ATG

ISSO Lead

Washington, DC ยท On-site +1

... Communications consulting, system engineering, integration, deployment and operation of ... Monitor the implementation of security controls and report the effectiveness to the ISSO and AOs.

Apex Systems

Jr. ISSO

Oxon Hill, MD ยท On-site

Job#: 3047698 Jr. ISSO Location: Oxon Hill, Maryland (Remote) Role Overview We are seeking a Junior ... Everforth Apex has a dedicated customer service team for our Consultants that can address questions ...

previous pagenext page

Showing results 21-40

All JobsTechnology JobsNetworking JobsCyber Security Administrator JobsIsso Consultant Jobs

Isso Consultant information

What is an ISSO consultant?

An ISSO (Information System Security Officer) Consultant is a cybersecurity professional who specializes in ensuring that an organization's information systems comply with security policies, standards, and regulations. They assess risks, develop security plans, oversee security controls, and provide guidance on maintaining the confidentiality, integrity, and availability of information systems. ISSO Consultants often work with organizations to prepare for security audits and accreditations, and help implement best practices to protect sensitive data from cyber threats.

What are the main challenges ISSO consultants face when ensuring compliance with information security frameworks?

ISSO Consultants often navigate complex regulatory requirements and evolving security standards, which can be challenging as organizations adopt new technologies. A common difficulty is coordinating with multiple departments to ensure consistent implementation of security controls and documentation. Additionally, ISSO Consultants must stay up-to-date on threats and best practices to advise stakeholders effectively, requiring ongoing professional development. Strong communication and problem-solving skills are essential for addressing these challenges and maintaining compliance.

What are the key skills and qualifications needed to thrive as an ISSO consultant, and why are they important?

To excel as an ISSO (Information System Security Officer) Consultant, you need deep knowledge of cybersecurity principles, risk management frameworks (such as NIST RMF), and a relevant degree or certifications like CISSP or CISM. Familiarity with security assessment tools, compliance platforms, and vulnerability management systems is essential. Strong analytical thinking, attention to detail, and effective communication skills help you interpret complex regulations and interact with clients and stakeholders. These skills ensure robust security posture, regulatory compliance, and the mitigation of information security risks for organizations.

What is the difference between Isso Consultant vs Security Analyst?

AspectIsso ConsultantSecurity Analyst
CredentialsCertifications like CISSP, CISA, CompTIA Security+Certifications like CISSP, GIAC, CompTIA Security+
Work EnvironmentConsulting firms, client sites, IT departmentsIn-house security teams, cybersecurity firms, IT departments
Industry UsageFinancial, healthcare, government, techFinancial, healthcare, government, tech
Primary FocusImplementing security solutions, compliance, risk managementMonitoring security threats, incident response, vulnerability assessment

While both Isso Consultants and Security Analysts work within cybersecurity, Isso Consultants typically focus on implementing security solutions and ensuring compliance for clients, often working across multiple industries. Security Analysts primarily monitor and respond to security threats within an organization. Both roles require similar certifications and industry experience, but their day-to-day responsibilities and work environments differ.

What states have the most Isso Consultant jobs?

States with the most job openings for Isso Consultant jobs include:

What are popular job titles related to Isso Consultant jobs?

For Isso Consultant jobs, the most frequently searched job titles are:

Infographic showing various Isso Consultant job openings in the United States as of August 2026, with employment types broken down into 87% Full Time, 7% Part Time, and 6% Contract. Highlights an 87% Physical, 4% Hybrid, and 9% Remote job distribution.

Information System Security Officer (ISSO)

Oakton, VA โ€ข On-site

Omniscius Consulting
See more jobs at Omniscius Consultingexternal

Other

Posted 9 days ago

Job description

  • Job Title: Information System Security Officer (ISSO)
  • Location: On-Site in Oakton, VA
  • Department: Cyber Security Services
  • Reports To: Management
  • FLSA Status: Full Time/Non-exempt
  • Clearance: Top Secret with the ability to obtain SCI with CI Poly

Job Purpose:

The Information Systems Security Officer (ISSO) ensures the secure operation of complex, multi-enclave IT and Research & Development (R&D) systems. The ISSO serves as the principal advisor to Information System Owners regarding security posture. This role requires the "hands-on" governance approach, heavily utilizing the Assured Compliance Assessment Solution (ACAS) and standard DoD tooling to drive Continuous Monitoring (ConMon), validate compliance, and maintain active Authority to Operate (ATO) statuses without disrupting critical experimental research.

Duties & Responsibilities:

ISSO responsibilities include, but are not limited to:

RMF Lifecycle Management: Develop, maintain, and oversee RMF authorization packages (SSP, SAR, RAR, SAP, and POA&M) within systems of record (e.g., eMASS, Xacta) for standard enterprise and non-standard research environments.

ACAS Operations & Vulnerability Management: Execute credentialed and non-credentialed ACAS (Tenable.sc / Nessus) scans across connected and air-gapped networks. Analyze scan results to identify vulnerabilities, assess risk, and validate compliance against DoD baselines.

POA&M & Remediation Advisory: Translate complex ACAS scan results and DISA STIG findings into actionable mitigation strategies. Work directly with systems administrators and researchers to remediate vulnerabilities, track progress, and close POA&M items.

Continuous Monitoring (ConMon): Implement and oversee ConMon strategies. Review ACAS dashboards, audit logs (e.g., Splunk, Elastic), and system configurations to ensure ongoing compliance with NIST SP 800-53 controls.

Air-Gapped & Multi-Enclave Support: Facilitate secure data transfers, manual ACAS plugin/feed updates, and compliance validation for isolated, disconnected, and highly classified enclaves.

Security Assessments: Conduct routine compliance checks using SCC, STIG Viewer, and Evaluate-STIG. Support independent third-party assessments (e.g., CCRI) and ATO control validations.

Incident Handling: Coordinate with the Information Systems Security Manager (ISSM) and incident response teams to investigate security anomalies, audit anomalies, or classified data spillages.

Requirements

Qualifications:

  • Education/Experience: Bachelorโ€™s degree in Cybersecurity, Information Technology, or related field (or equivalent experience) with 5โ€“7+ years of experience acting as an ISSO or in a senior DoD RMF compliance role.
  • DoD Directive: DoD 8570.01-M / 8140.03 compliant for IAM Level II or III (e.g., CAP, CISM, CASP+ CE, CISSP).
  • Framework Knowledge: Expert-level understanding of DoD RMF (DoDI 8510.01), NIST SP 800-53/800-37/800-171, and DISA STIG implementation.
  • Tooling: Proven experience managing ATO artifacts in eMASS or Xacta. Proficient with SCC, STIG Viewer, and interpreting IAVA/IAVM notices.
  • Communication: Exceptional written and verbal communication skills. Ability to act as a security liaison, balancing strict DoD compliance requirements with our flexible, fast-paced R&D mission needs.
#J-18808-Ljbffr

Apply