ZipRecruiter

Log In

2

Remote Isso Jobs in Quantico, VA (NOW HIRING)

Team AMG

ISSO Security Analyst

VA · On-site +1

$52.41/hr

ISSO Security Analyst (SSA) Core Hours: 8:30am - 4:30pm EST As a Security Analyst on our team, you'll use your experience to work with Veterans Affairs (VA) Information System Owners (ISO ...

Team AMG

ATO Security Analyst

VA · On-site +1

$52.41/hr

You'll use your ATO experience to work with Veterans Affairs (VA) Information System Owners (ISO), Information System Security Officers (ISSO), site managers, and other system stakeholders to ...

All JobsIsso JobsRemote Isso JobsRemote Isso Jobs in Quantico, VA

Remote Isso information

See Quantico, VA salary details

$48.7K

$125.3K

$195.4K

How much do remote isso jobs pay per year?

As of Aug 9, 2026, the average yearly pay for remote isso in Quantico, VA is $125,331.00, according to ZipRecruiter salary data. Most workers in this role earn between $100,600.00 and $146,200.00 per year, depending on experience, location, and employer.

What are the key skills and qualifications needed to thrive as a Remote ISSO?

To thrive as a Remote ISSO (Information Systems Security Officer), candidates need a robust understanding of information security principles, risk management frameworks (such as NIST), and compliance requirements, often backed by a degree in cybersecurity or a related field. Familiarity with security tools like vulnerability scanners, SIEM platforms, and certifications such as CISSP or CISM are highly valued. Excellent written communication, analytical thinking, and the ability to work independently are crucial soft skills in this remote context. These attributes enable effective oversight of organizational security, ensure compliance, and facilitate collaboration while working off-site.

What is a Remote ISSO?

A Remote ISSO (Information Systems Security Officer) job involves managing and ensuring the security of an organization's IT systems while working remotely. Responsibilities include implementing security policies, conducting risk assessments, ensuring compliance with regulations like NIST and FISMA, and responding to security incidents. Remote ISSOs collaborate with IT teams to safeguard sensitive data and maintain system integrity. Strong knowledge of cybersecurity frameworks and federal compliance standards is essential for this role.

What are some common challenges faced by Remote ISSOs and how can they be overcome?

Remote ISSOs often face the challenge of maintaining strong oversight of security protocols and compliance across distributed teams and systems without being onsite. To overcome this, successful ISSOs utilize secure remote access tools, implement robust communication practices, and foster strong relationships with IT and compliance stakeholders. Regular virtual meetings, clear documentation, and proactive incident response planning help ensure security standards are consistently met. Staying updated on evolving cyber threats and engaging in continuous professional development also help remote ISSOs remain effective and adaptable in a dynamic environment.

What job categories do people searching Remote Isso jobs in Quantico, VA look for? The top searched job categories for Remote Isso jobs in Quantico, VA are:
What cities near Quantico, VA are hiring for Remote Isso jobs? Cities near Quantico, VA with the most Remote Isso job openings:
Remote Isso jobs near you

Geospatial ISSO - DHS

cFocus Software Incorporated

Springfield, VA • On-site, Remote

Full-time

Posted 14 days ago

Job description

cFocus Software seeks a Geospatial ISSO to join our program supporting the Department of Homeland Security (DHS). This position is remote. This position requires a Public Trust Clearance.
Qualifications:
  • Bachelor's or master's degree in IT, Computer Science, Geography or a related field.
  • 6+ years of cybersecurity or information-assurance experience, including at least five years performing ISSO, system-security, RMF, authorization, compliance, or continuous-monitoring responsibilities for federal information systems.
  • Demonstrated experience implementing and assessing NIST SP 800-53 security controls and maintaining SSPs, authorization artifacts, POA&Ms, control evidence, and continuous-monitoring records.
  • Experience supporting FISMA authorization and ongoing authorization, ATO/ATC activities, vulnerability and patch management, security assessments, audit/data-call responses, and change-control security reviews.
  • Knowledge of DHS MD 4300A or comparable federal sensitive-system policy, NIST Risk Management Framework, NIST SP 800-37, NIST SP 800-53, NIST SP 800-137, FISMA, OMB A-130, and federal privacy/security requirements.
  • Experience analyzing authenticated scan results, adjudicating findings, coordinating remediation, validating evidence, and reporting security posture and risk to Government stakeholders.
  • Ability to advise a Government System Owner and collaborate effectively with engineers, developers, administrators, architects, cloud teams, privacy personnel, assessors, and program leadership.
  • Strong technical writing, analysis, organization, communication, and documentation-quality skills.
  • Ability to satisfy DHS suitability, background-investigation, Entry on Duty, security, and system-access requirements for the assigned position.
  • Active CISSP, CISM, GSLC, CAP/CGRC, CASP+, or another advanced information-security or risk-management certification.
  • Experience serving as an ISSO for DHS, another federal civilian agency, or a mission-critical FISMA Moderate/High system.
  • Working knowledge of ESRI Portal/ArcGIS Enterprise, ArcGIS Online, geospatial web services, enterprise geodatabases, custom GIS applications, or location-intelligence environments.
  • Experience securing AWS or other enterprise cloud environments, identity and access integrations, APIs, web applications, data pipelines, and hybrid infrastructures.
  • Experience with DHS ISVM processes and Swimlane or comparable vulnerability/compliance workflow platforms.
  • Experience with privacy compliance, interconnection agreements, contingency planning and exercises, Section 508, IPv6, DevSecOps, or system-security engineering
Duties:
  • Serve as the principal advisor to the GII System Owner on cybersecurity requirements, risk, compliance, authorization posture, control effectiveness, and security impacts across geospatial capabilities.
  • Interpret and apply DHS MD 4300A Sensitive Systems Policy, DHS security authorization guidance, FISMA, OMB and NIST requirements, DHS privacy rules, and other applicable directives throughout the Systems Engineering Life Cycle.
  • Coordinate with GMO leadership, developers, system administrators, architects, cloud providers, data managers, technical support, privacy personnel, DHS security organizations, and other enterprise stakeholders.
  • Assess emerging technical, operational, and geospatial requirements for security implications and provide timely, risk-informed recommendations to the System Owner and program leadership.
  • Maintain clear separation of authority: provide guidance and recommendations while preserving final Government decisions, approvals, risk acceptance, and signatures
  • Ensure implementation, maintenance, and evidence of management, operational, and technical security controls required by the GII System Security Plan (SSP) and DHS policy.
  • Maintain the SSP and supporting authorization documentation so that system boundaries, components, data flows, interfaces, control implementation statements, responsibilities, and evidence reflect the current operating environment.
  • Coordinate control implementation and evidence collection for ESRI Portal, ArcGIS Online, AWS-hosted applications and infrastructure, identity and access services, geospatial data services, custom applications, networks, and enterprise integrations.
  • Identify control gaps, weaknesses, dependencies, and inherited-control issues; assign or coordinate remediation ownership and track corrective actions through approved processes.
  • Support annual SSP updates and other security-documentation refreshes required by the DHS authorization and compliance lifecycle.
  • Execute the GII Information Security Continuous Monitoring (ISCM) program and provide current visibility into system assets, vulnerabilities, configuration, control effectiveness, and changes in security posture.
  • Coordinate and review credentialed/authenticated scans and other automated security-management outputs in accordance with the current ISCM strategy.
  • Review, validate, and adjudicate findings from continuous monitoring, vulnerability diagnosis, patching, configuration assessment, and mitigation activities.
  • Perform and document monthly ISCM review and adjudication activities, maintain traceable evidence, identify trends and recurring weaknesses, and escalate material risks.
  • Coordinate with operations and engineering teams on monthly patching, emergency fixes, vulnerability remediation, and follow-up validation while minimizing mission disruption.
  • Maintain dashboards, metrics, findings status, and decision-support reporting needed to demonstrate confidentiality, integrity, availability, and continued authorization
  • Prepare, maintain, validate, and organize artifacts supporting assessment, authorization, certification/accreditation, Authority to Operate (ATO), and Authority to Connect (ATC) activities.
  • Coordinate evidence requests, control assessments, security testing, authorization reviews, and remediation activities with assessors, technical teams, program personnel, and DHS stakeholders.
  • Maintain an authorization-ready posture by ensuring artifacts are accurate, current, internally consistent, traceable, and aligned with the operational environment.
  • Respond to DHS cybersecurity investigations, data calls, and requests for information concerning the GII security posture.
  • Support compliance reporting and corrective actions arising from security assessments, audits, vulnerability reviews, and Government direction.

Apply