The ISSO provides enterprise cybersecurity, risk management, and compliance support for Health IT systems while maintaining Authority to Operate (ATO) packages. They coordinate security governance, monitor compliance activities, and provide expert recommendations to stakeholders throughout the system development lifecycle.
This is a remote position.
We are looking for a candidate to provide enterprise cybersecurity, risk management, and compliance support for IHSC Health IT systems and initiatives. This position serves as a key advisor in establishing and maintaining Authority to Operate (ATO) packages for multiple systems while helping ensure compliance with DHS, ICE, and federal cybersecurity requirements. The Information Systems Security Officer (ISSO) supports security governance, authorization activities, risk assessments, and continuous monitoring efforts across the Health IT environment. This role functions in an advisory and oversight capacity, providing guidance, coordination, and compliance validation without performing system administration, configuration, implementation, or operational control activities.
Key Responsibilities:
Assist in the planning, execution, and oversight of cybersecurity risk management activities, including system security planning and security control assessments.
Coordinate and support ATO efforts, including the development, review, tracking, and maintenance of authorization documentation and artifacts.
Monitor compliance activities and support vulnerability management, remediation tracking, and continuous monitoring initiatives.
Provide cybersecurity recommendations and validation support during system development, integration, modernization, and enhancement efforts.
Work closely with program managers, system owners, technical teams, and stakeholders to ensure security requirements are effectively addressed.
Support incident response coordination, security reporting, and risk communication activities.
Promote compliance with applicable federal cybersecurity laws, regulations, and frameworks, including NIST, FISMA, DHS, and ICE security requirements.
Maintain security-related documentation, including risk registers, Plans of Action and Milestones (POA&Ms), audit evidence, and assessment records.
Provide leadership with analysis of cybersecurity risks, emerging threats, and recommended mitigation strategies.
Requirements
Working knowledge of federal information security regulations, cybersecurity frameworks, and compliance requirements.
Experience supporting security and compliance initiatives within federal government or highly regulated IT environments.
Strong understanding of risk management frameworks, security authorization processes, and continuous monitoring programs.
Ability to communicate technical cybersecurity concepts clearly to both technical and non-technical audiences.
Excellent organizational, coordination, and technical documentation skills.
Minimum of three (3) to five (5) years of experience supporting cybersecurity, information assurance, or IT security programs.
Professional cybersecurity certification such as CISSP, CISM, CAP, Security+, or an equivalent credential is preferred.
“I was the first applicant for a remote marketing position that got listed on the company website the same day I applied. Had an interview within 48 hours!”
— Sarah J.
·
Marketing Manager
★★★★★
Verified
