ZipRecruiter

Log In

2

Remote Isso Jobs in Virginia (NOW HIRING)

Booz Allen Hamilton, Inc.

ISSO Security Analyst

Mclean, VA · On-site +1

$99K - $225K/yr

Remote Work: Hybrid Job Number: R0245114 Location: McLean,VA,US Share job via: Share ISSO Security Analyst The Opportunity: As a security analyst on our team, you'll use your experience to work with ...

Booz Allen Hamilton, Inc.

ISSO Security Analyst

Mclean, VA · On-site +1

$99K - $225K/yr

Remote Work: Hybrid Job Number: R0244193 Location: McLean,VA,US Share job via: Share ISSO Security Analyst The Opportunity: As a security analyst on our team, you'll use your experience to work with ...

TSTC

Lead ISSO - Contingent Upon Award

Reston, VA · On-site +1

$90K - $120K/yr

Total Systems Technologies Corporation is seeking an experienced ISSO Lead with expertise in ... Flexible Work Options - Remote work allowed, flexible schedules, and telework opportunities ...

Team AMG

ISSO Security Analyst

VA · On-site +1

$52.41/hr

ISSO Security Analyst (SSA) Core Hours: 8:30am - 4:30pm EST As a Security Analyst on our team, you'll use your experience to work with Veterans Affairs (VA) Information System Owners (ISO ...

SAIC

Cybersecurity Engineer - ISSO

Vienna, VA · On-site +1

$160K - $200K/yr

None Potential for Remote Work: ORA_ON_SITE Description SAIC is seeking a Cyber Security Engineer to support critical DoD and Intelligence Community missions. You will lead assessment, authorization ...

New

VivSoft Technologies LLC

Cybersecurity Engineer

Herndon, VA · On-site +1

$145K - $175K/yr

Remote Clearance Required: Secret Clearance Position Type: Full-Time About the company: At VivSoft ... Demonstrated experience as ISSO or Security Engineer on a DoD IL-4 or IL-5 ATO, SSP authoring, POA ...

Steampunk

Information Systems Security Officer

Mclean, VA · On-site +1

$70K - $115K/yr

Overview Steampunk wants you to be an Information System Security Officer (ISSO) on our team to support a government customer. In this challenging and rewarding role you'll be asked take initiative ...

Steampunk

Information Systems Security Officer

Mclean, VA · On-site +1

$70K - $115K/yr

Overview Steampunk wants you to be an Information System Security Officer (ISSO) on our team to support a government customer. In this challenging and rewarding role you'll be asked take initiative ...

next page

Showing results 1-20

All JobsIsso JobsRemote Isso JobsRemote Isso Jobs in Virginia

Remote Isso information

See Virginia salary details

$45.6K

$117.3K

$182.9K

How much do remote isso jobs pay per year?

As of Aug 8, 2026, the average yearly pay for remote isso in Virginia is $117,312.00, according to ZipRecruiter salary data. Most workers in this role earn between $94,200.00 and $136,800.00 per year, depending on experience, location, and employer.

What are the key skills and qualifications needed to thrive as a Remote ISSO?

To thrive as a Remote ISSO (Information Systems Security Officer), candidates need a robust understanding of information security principles, risk management frameworks (such as NIST), and compliance requirements, often backed by a degree in cybersecurity or a related field. Familiarity with security tools like vulnerability scanners, SIEM platforms, and certifications such as CISSP or CISM are highly valued. Excellent written communication, analytical thinking, and the ability to work independently are crucial soft skills in this remote context. These attributes enable effective oversight of organizational security, ensure compliance, and facilitate collaboration while working off-site.

What is a Remote ISSO?

A Remote ISSO (Information Systems Security Officer) job involves managing and ensuring the security of an organization's IT systems while working remotely. Responsibilities include implementing security policies, conducting risk assessments, ensuring compliance with regulations like NIST and FISMA, and responding to security incidents. Remote ISSOs collaborate with IT teams to safeguard sensitive data and maintain system integrity. Strong knowledge of cybersecurity frameworks and federal compliance standards is essential for this role.

What are some common challenges faced by Remote ISSOs and how can they be overcome?

Remote ISSOs often face the challenge of maintaining strong oversight of security protocols and compliance across distributed teams and systems without being onsite. To overcome this, successful ISSOs utilize secure remote access tools, implement robust communication practices, and foster strong relationships with IT and compliance stakeholders. Regular virtual meetings, clear documentation, and proactive incident response planning help ensure security standards are consistently met. Staying updated on evolving cyber threats and engaging in continuous professional development also help remote ISSOs remain effective and adaptable in a dynamic environment.

What are the most commonly searched types of Isso jobs in Virginia? The most popular types of Isso jobs in Virginia are:
What are popular job titles related to Remote Isso jobs in Virginia? For Remote Isso jobs in Virginia, the most frequently searched job titles are:
What job categories do people searching Remote Isso jobs in Virginia look for? The top searched job categories for Remote Isso jobs in Virginia are:
What cities in Virginia are hiring for Remote Isso jobs? Cities in Virginia with the most Remote Isso job openings:
Remote Isso jobs near you
Infographic showing various Remote Isso job openings in Virginia as of August 2026, with employment types broken down into 74% Full Time, 13% Part Time, and 13% Temporary. Highlights an 100% Remote job distribution, with an average salary of $117,312 per year, or $56.4 per hour.

Geospatial ISSO - DHS

cFocus Software Incorporated

Springfield, VA • On-site, Remote

Full-time

Posted 12 days ago

Job description

cFocus Software seeks a Geospatial ISSO to join our program supporting the Department of Homeland Security (DHS). This position is remote. This position requires a Public Trust Clearance.
Qualifications:
  • Bachelor's or master's degree in IT, Computer Science, Geography or a related field.
  • 6+ years of cybersecurity or information-assurance experience, including at least five years performing ISSO, system-security, RMF, authorization, compliance, or continuous-monitoring responsibilities for federal information systems.
  • Demonstrated experience implementing and assessing NIST SP 800-53 security controls and maintaining SSPs, authorization artifacts, POA&Ms, control evidence, and continuous-monitoring records.
  • Experience supporting FISMA authorization and ongoing authorization, ATO/ATC activities, vulnerability and patch management, security assessments, audit/data-call responses, and change-control security reviews.
  • Knowledge of DHS MD 4300A or comparable federal sensitive-system policy, NIST Risk Management Framework, NIST SP 800-37, NIST SP 800-53, NIST SP 800-137, FISMA, OMB A-130, and federal privacy/security requirements.
  • Experience analyzing authenticated scan results, adjudicating findings, coordinating remediation, validating evidence, and reporting security posture and risk to Government stakeholders.
  • Ability to advise a Government System Owner and collaborate effectively with engineers, developers, administrators, architects, cloud teams, privacy personnel, assessors, and program leadership.
  • Strong technical writing, analysis, organization, communication, and documentation-quality skills.
  • Ability to satisfy DHS suitability, background-investigation, Entry on Duty, security, and system-access requirements for the assigned position.
  • Active CISSP, CISM, GSLC, CAP/CGRC, CASP+, or another advanced information-security or risk-management certification.
  • Experience serving as an ISSO for DHS, another federal civilian agency, or a mission-critical FISMA Moderate/High system.
  • Working knowledge of ESRI Portal/ArcGIS Enterprise, ArcGIS Online, geospatial web services, enterprise geodatabases, custom GIS applications, or location-intelligence environments.
  • Experience securing AWS or other enterprise cloud environments, identity and access integrations, APIs, web applications, data pipelines, and hybrid infrastructures.
  • Experience with DHS ISVM processes and Swimlane or comparable vulnerability/compliance workflow platforms.
  • Experience with privacy compliance, interconnection agreements, contingency planning and exercises, Section 508, IPv6, DevSecOps, or system-security engineering
Duties:
  • Serve as the principal advisor to the GII System Owner on cybersecurity requirements, risk, compliance, authorization posture, control effectiveness, and security impacts across geospatial capabilities.
  • Interpret and apply DHS MD 4300A Sensitive Systems Policy, DHS security authorization guidance, FISMA, OMB and NIST requirements, DHS privacy rules, and other applicable directives throughout the Systems Engineering Life Cycle.
  • Coordinate with GMO leadership, developers, system administrators, architects, cloud providers, data managers, technical support, privacy personnel, DHS security organizations, and other enterprise stakeholders.
  • Assess emerging technical, operational, and geospatial requirements for security implications and provide timely, risk-informed recommendations to the System Owner and program leadership.
  • Maintain clear separation of authority: provide guidance and recommendations while preserving final Government decisions, approvals, risk acceptance, and signatures
  • Ensure implementation, maintenance, and evidence of management, operational, and technical security controls required by the GII System Security Plan (SSP) and DHS policy.
  • Maintain the SSP and supporting authorization documentation so that system boundaries, components, data flows, interfaces, control implementation statements, responsibilities, and evidence reflect the current operating environment.
  • Coordinate control implementation and evidence collection for ESRI Portal, ArcGIS Online, AWS-hosted applications and infrastructure, identity and access services, geospatial data services, custom applications, networks, and enterprise integrations.
  • Identify control gaps, weaknesses, dependencies, and inherited-control issues; assign or coordinate remediation ownership and track corrective actions through approved processes.
  • Support annual SSP updates and other security-documentation refreshes required by the DHS authorization and compliance lifecycle.
  • Execute the GII Information Security Continuous Monitoring (ISCM) program and provide current visibility into system assets, vulnerabilities, configuration, control effectiveness, and changes in security posture.
  • Coordinate and review credentialed/authenticated scans and other automated security-management outputs in accordance with the current ISCM strategy.
  • Review, validate, and adjudicate findings from continuous monitoring, vulnerability diagnosis, patching, configuration assessment, and mitigation activities.
  • Perform and document monthly ISCM review and adjudication activities, maintain traceable evidence, identify trends and recurring weaknesses, and escalate material risks.
  • Coordinate with operations and engineering teams on monthly patching, emergency fixes, vulnerability remediation, and follow-up validation while minimizing mission disruption.
  • Maintain dashboards, metrics, findings status, and decision-support reporting needed to demonstrate confidentiality, integrity, availability, and continued authorization
  • Prepare, maintain, validate, and organize artifacts supporting assessment, authorization, certification/accreditation, Authority to Operate (ATO), and Authority to Connect (ATC) activities.
  • Coordinate evidence requests, control assessments, security testing, authorization reviews, and remediation activities with assessors, technical teams, program personnel, and DHS stakeholders.
  • Maintain an authorization-ready posture by ensuring artifacts are accurate, current, internally consistent, traceable, and aligned with the operational environment.
  • Respond to DHS cybersecurity investigations, data calls, and requests for information concerning the GII security posture.
  • Support compliance reporting and corrective actions arising from security assessments, audits, vulnerability reviews, and Government direction.

Apply