AnaVation
Information System Security Officer (ISSO)
$86K–$202K
Washington, DC · On-site · Full-time · Posted Sep 15, 2026
- Experience
- 6+ years’ experience with NIST, FISMA, and Security Assessment & Authorization.
- Visa sponsorship
- Ability to obtain and maintain a customer Public Trust clearance required; qualified candidates can be sponsored for this clearance.
About the job
Performs information-system security, risk assessments, compliance, and continuous monitoring to support system accreditation and maintain Authority to Operate (ATO).
What you'll do
- Develop, maintain, and assess SA&A packages, SSPs, and supporting security documentation.
- Conduct risk and security control assessments, track POA&Ms, and review vulnerability scans with remediation recommendations.
- Support audits and compliance, and develop, test, and train personnel on incident response and contingency plans.
What they ask for
- 6+ years’ experience with NIST, FISMA, and Security Assessment & Authorization.
- FedRAMP and cloud experience, such as Azure, AWS, or Oracle (OCI).
- In-depth knowledge of the Risk Management Framework (RMF) and relevant NIST publications.
- CISSP certification; ability to obtain and maintain a customer Public Trust clearance.
Nice to have
- Hands-on experience with a Governance, Risk, and Compliance tool such as JCAM (CSAM) or eMASS.
- Experience with security tools such as Nessus, BigFix, SCCM, or ePO, and Microsoft Excel or PowerBI.
Pay
USD 85,933.19–202,292.42 per-year-salary; base salary
Tools
NIST, FISMA, FedRAMP, Azure, AWS, Oracle (OCI), JCAM (CSAM), eMASS
Model-written summary · the original posting is authoritative