Job Summary

The Information System Security Officer (ISSO) is responsible for maintaining the security posture, compliance, and authorization status of large-scale federal information systems. This role involves managing the Risk Management Framework (RMF) lifecycle, maintaining Authority to Operate (ATO) documentation, and coordinating continuous monitoring activities. The ISSO collaborates with client security leadership, security teams, and DevSecOps personnel to ensure ongoing compliance with NIST SP 800-53, FedRAMP, and other federal information security regulations.

Key Responsibilities

- Maintain the system’s Risk Management Framework documentation and Authority to Operate (ATO) package.
- Manage and maintain security-control implementation evidence aligned with NIST SP 800-53 and FedRAMP requirements.
- Track security findings and coordinate remediation activities through Plans of Action and Milestones (POA&Ms;).
- Manage continuous-monitoring documentation, evidence, and reporting activities.
- Support security assessments, compliance audits, system authorization reviews, and related security activities.
- Coordinate with the client Information System Security Manager, security teams, and DevSecOps personnel on security and compliance requirements.
- Review proposed system changes to assess potential security impacts.
- Maintain approved system-security configurations and security baselines.
- Report the system’s security posture, risks, findings,



and incidents to program leadership and client stakeholders.

Qualifications

- Required Skills:
- Information System Security Officer experience
- Federal information-system security
- Risk Management Framework (RMF)
- Authority to Operate (ATO) processes and documentation
- NIST SP 800-53 security controls
- Security-control implementation and evidence management
- Continuous monitoring
- Plans of Action and Milestones (POA&M;) management
- Security assessments and audits
- Security authorization activities
- Security-baseline management
- Security-risk and incident reporting
- FedRAMP experience
- AWS cloud-security experience
- Financial-regulatory security experience
- Security automation experience
- Governance, Risk, and Compliance (GRC) tooling experience

- Required Certification: A relevant security certification such as CISSP or CAP is required.
- Preferred Education: A Bachelor's degree in a related field is often preferred.
- Key Attributes:

- Strong analytical and problem-solving skills
- Excellent communication and interpersonal abilities
- Attention to detail
- Ability to work independently and as part of a team
- Ability to obtain a Public Trust clearance

Benefits

- Market-competitive salary range.
- Comprehensive health, dental, and vision insurance.
- Retirement savings plan with company match.
- Paid time off and holidays.

How to Apply

Interested candidates are encouraged to click on the 'Apply Now' button to submit their application.

📌 Information System Security Officer (ISSO) (West Bengal)
🏢 Quantum Business Advisory USA
📍 West Bengal