Information System Security Officer – ISSO

Job not on LinkedIn

🔥 0 minutes ago

🦌 Connecticut, Florida, +11 more states – Remote

🦌 Connecticut – Remote 🐊 Florida – Remote 🌽 Illinois – Remote 🏖️ New Jersey – Remote 🌲 North Carolina – Remote 🏈 Ohio – Remote 🦀 Maryland – Remote 🍂 Massachusetts – Remote 🚗 Michigan – Remote 🔔 Pennsylvania – Remote 🤠 Texas – Remote ☕ Washington – Remote 🧀 Wisconsin – Remote

💵 $115.4k - $192.3k / year

⏰ Full Time

🟡 Mid-level

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 0%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

LexisNexis

WebsiteLinkedInAll Job Openings

10,000+ employees

Founded 1970

⚖️ Legal

💼 Consulting

🏥 Healthcare

💰 Corporate Round on 2021-06

Legal • Consulting • Healthcare

LexisNexis is a provider of professional solutions tailored for law firms, corporations, government agencies, and academic institutions. It offers legal solutions, news, and business insights. LexisNexis also provides risk solutions for companies and government agencies, focusing on data analytics for compliance, customer acquisition, fraud detection, health outcomes, identity solutions, investigations, receivables management, risk decisioning, and workflow optimization. As part of the RELX Group, LexisNexis is committed to enhancing digital experience through data and analytics.

📋 Description

• Serve as the designated ISSO for FedRAMP-authorized systems • Maintain the organization's Authority to Operate (ATO) and support ongoing compliance activities • Lead FedRAMP continuous monitoring, including monthly, quarterly, and annual reporting • Coordinate annual assessments, independent audits, penetration testing, and security reviews with Third Party Assessment Organizations (3PAOs) • Manage security-related communications with federal agencies, sponsoring organizations, and stakeholders • Conduct security risk assessments and vulnerability analyses • Review, assess, and monitor POA&M items through remediation • Evaluate security impacts of system changes and support Significant Change Request (SCR) submissions • Ensure implementation and effectiveness of NIST 800-53 security controls • Facilitate security reviews for architecture changes, new technologies, and cloud deployments • Maintain FedRAMP security documentation and approve updates resulting from system changes • Ensure evidence collection and compliance artifacts are complete and audit-ready • Monitor security events, incidents, and compliance metrics • Validate remediation efforts and track compliance KPIs for leadership • Participate in security incident investigations and response efforts • Coordinate with security operations teams on threat identification and remediation • Support root cause analysis and corrective action planning • Improve security monitoring tools and processes • Partner with Engineering and DevOps to integrate compliance into development and deployment • Provide security guidance throughout the SDLC • Support cloud migration, modernization, and technology transformation initiatives • Ensure compliance and security awareness training meet FedRAMP requirements • Matrix manage resources participating in the FedRAMP Program

🎯 Requirements

• Bachelor's degree in Cybersecurity, Information Systems, Computer Science, Engineering, or related field • Equivalent work experience may be considered in lieu of degree requirements • 5+ years of information security, cybersecurity, or compliance experience • 3+ years supporting FedRAMP, FISMA, or federal compliance programs • Experience maintaining FedRAMP Moderate or High authorized environments • Experience supporting security assessments, audits, and continuous monitoring activities • Experience with cloud platforms such as AWS, Azure, or Google Cloud • Strong understanding of FedRAMP requirements, NIST SP 800-53, NIST 800-37 Risk Management Framework (RMF), FISMA, NIST 800-171, Zero Trust Architecture principles, vulnerability management processes, security operations, and incident response • Familiarity with SIEM platforms, vulnerability scanners, endpoint detection and response (EDR), Identity and Access Management (IAM), and cloud-native security services • Preferred: CISSP, CISM, GSLC, CAP, or equivalent cybersecurity certification • Preferred: FedRAMP-specific experience acting as ISSO, Security Compliance Manager, or FedRAMP Program Manager • Preferred: Experience supporting federal agencies or government contractors • Preferred: Knowledge of automated compliance platforms and Governance, Risk, and Compliance (GRC) tools • Preferred: Experience leveraging AI and automation to streamline compliance reporting, evidence collection, and POA&M management • Preferred: Experience with AWS GovCloud or Azure Government environments

🏖️ Benefits

• Annual incentive bonus • Country specific benefits • Disability accommodation/support during the hiring process