Sr ISSO

Conviso Inc is hiring Senior Information Systems Security Officer (ISSO) for a Hybrid position. This job comes with benefits, 401K & some accrued PTO. The ideal candidate will handle hands-on RMF/authorization, continuous monitoring, vulnerability management, security documentation, and audit support.

Role: Senior Information Systems Security Officer (ISSO)
Clearance: Tier 4 (High-Risk Public Trust) eligibility required
Location: Hybrid – minimum 2 days/week onsite in Washington, DC
Hours: 7:00 AM–6:00 PM ET, Monday–Friday

Key Responsibilities

Lead ISSO workstreams covering RMF, ATO, ConMon, POA&M, vulnerability management, security documentation, and audits
Develop/maintain SSPs, POA&Ms, ConMon Plans, control statements, and inheritance records in CSAM
Drive authorization packages through federal review/sign-off
Manage Tenable Nessus/Qualys vulnerabilities, including false-positive adjudication and closure evidence
Perform Security Impact Analyses and support CAB/CCB/ERB reviews
Support incident response using CSAM and Splunk
Prepare ConMon, POA&M, FISMA, CISA, and audit reporting

Required Qualifications

Bachelor’s degree or equivalent relevant experience
7+ years cybersecurity, including 5+ years federal ISSO/equivalent experience
At least 2 complete RMF authorization packages through AO decision for FISMA Moderate systems
Strong knowledge of NIST 800-37, 800-53, 800-53A, 800-137 & 800-18
Hands-on federal GRC platform experience
Tenable Nessus or Qualys vulnerability management experience
Active CGRC, CISSP, CISM, or CASP+ (equivalent considered)

Strongly Preferred

Hands-on CSAM experience
Current Tier 4+ federal background investigation
ServiceNow ITSM/Change Management and Splunk
Microsoft security stack: Defender, Intune, Entra ID, Azure/M365
CISA BOD/Emergency Directive compliance reporting
Privacy documentation: PTAs, PIAs, and SORN reviews