Information Systems Security Officer

Role overview

This opening is being shared on behalf of a partner employer, which will handle the application review and all subsequent hiring steps. The opportunity is for an Information Systems Security Officer located in the United States.

The role is central to federal cloud security operations and focuses on keeping highly regulated environments aligned with strict compliance, risk, and authorization requirements. You will help maintain and strengthen the security posture of government-facing systems while supporting the full Authorization to Operate (ATO) process. The job combines hands-on technical security work with governance, risk, and compliance leadership, including continuous monitoring, audit preparation, and enforcement of security controls. You will also help build and automate security workflows in cloud settings to cut down manual work and improve visibility and resilience. This is a mission-critical, highly technical position at the intersection of cybersecurity, cloud architecture, and federal compliance frameworks, with direct impact on the reliability and protection of systems used in government operations at scale.

Responsibilities

• Own and support the complete ATO lifecycle, including documentation, assessment coordination, and ongoing authorization activities.
• Build, operate, and improve Continuous Monitoring programs with automated scanning, reporting, and remediation processes.
• Act as the main security contact for federal compliance matters, audits, and third-party assessment organizations.
• Create and maintain System Security Plans, supporting security records, and compliance evidence aligned with FedRAMP, FISMA, and NIST expectations.
• Track vulnerabilities, assess risk, manage POA&M items, and verify remediation across cloud systems.
• Drive implementation of security controls and ensure they map to federal frameworks such as NIST SP 800-53 and RMF.
• Oversee change management activities, including security impact reviews and approval routing for system updates.
• Support incident response, disaster recovery, and business continuity planning, along with coordination and post-incident review.
• Perform access reviews and support least-privilege practices through regular entitlement audits.
• Work closely with engineering teams to strengthen cloud architecture and support DevSecOps practices in regulated environments.

Requirements

• Bachelor’s degree in Cybersecurity, Computer Science, Engineering, or a related technical discipline, or equivalent practical experience.
• Active DoD 8140/8570 IAM Level II certification such as CISSP, CISM, CASP+, or a comparable credential.
• Strong working knowledge of federal security programs and standards, including FedRAMP, FISMA, RMF, and NIST SP 800-53.
• Demonstrated experience handling ATO workflows and supporting federal audits or third-party assessments.
• Practical experience in cloud security settings such as AWS GovCloud or similar regulated platforms.
• Solid understanding of vulnerability management, SIEM platforms, and enterprise security operations.
• Experience producing security documentation, architecture diagrams, and compliance evidence.
• Strong analytical and troubleshooting skills, with the ability to work effectively in tightly regulated environments.
• Excellent written and verbal communication skills for audits, governance tasks, and cross-functional coordination.
• Familiarity with automation or scripting tools such as Python or JavaScript is an advantage.

Perks and benefits

• Competitive annual compensation between $125,000 and $180,000.
• Eligibility for performance bonuses and equity awards.
• Comprehensive coverage for medical, dental, vision, and mental health needs.
• Paid time off, parental leave, and flexible vacation arrangements.
• Strong emphasis on professional growth and cybersecurity certifications.
• Remote work flexibility within the United States.
• Inclusive, mission-driven environment with a strong focus on security excellence and innovation.

Additional information

The hiring partner manages the candidate selection process, including interviews and next steps. Applications are reviewed through an AI-assisted matching process designed to evaluate candidates fairly and quickly against the role’s core criteria. The shortlist is then shared with the hiring employer, while the final hiring decisions are made by their internal team.

Privacy and data processing

By submitting an application, you acknowledge that your personal data may be processed to assess your candidacy and share relevant details with the hiring employer. This is done on the basis of legitimate interest and pre-contractual measures under applicable data protection laws, including GDPR. You may request access, correction, deletion, or objection to the processing of your data at any time.

Artificial intelligence tools may be used to support parts of the hiring process, such as reviewing applications, analyzing resumes, evaluating responses, and flagging possible inconsistencies or verification signals. These tools assist recruitment efforts but do not replace human judgment. Final hiring decisions are made by people. For more information about data handling, you may contact the hiring team.