Information System Security Officer – ISSO

🕒 September 24

🏈 Alabama, Arizona, +41 more states – Remote

🏈 Alabama – Remote 🌵 Arizona – Remote ⛰️ Colorado – Remote 🦌 Connecticut – Remote 🐊 Florida – Remote 🥔 Idaho – Remote 🌽 Illinois – Remote 🌾 Iowa – Remote 🌪️ Kansas – Remote 🐎 Kentucky – Remote ⚜️ Louisiana – Remote 🦞 Maine – Remote 🦬 Montana – Remote 🌾 Nebraska – Remote 🎰 Nevada – Remote 🗻 New Hampshire – Remote 🏖️ New Jersey – Remote 🌶️ New Mexico – Remote 🗽 New York – Remote 🌲 North Carolina – Remote 🌾 North Dakota – Remote 🏈 Ohio – Remote 🌪️ Oklahoma – Remote 🌲 Oregon – Remote 🦀 Maryland – Remote 🍂 Massachusetts – Remote 🚗 Michigan – Remote ❄️ Minnesota – Remote 🎸 Mississippi – Remote 🏰 Missouri – Remote 🔔 Pennsylvania – Remote ⚓ Rhode Island – Remote 🌴 South Carolina – Remote 🗿 South Dakota – Remote 🎸 Tennessee – Remote 🤠 Texas – Remote ⛷️ Utah – Remote 🍁 Vermont – Remote ⚔️ Virginia – Remote ☕ Washington – Remote ⛰️ West Virginia – Remote 🧀 Wisconsin – Remote 🦬 Wyoming – Remote

💵 $115.4k - $192.3k / year

⏰ Full Time

🟡 Mid-level

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 10%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

RELX

WebsiteLinkedInAll Job Openings

10,000+ employees

💼 Consulting

🏥 Healthcare

🛡️ Insurance

Consulting • Healthcare • Insurance

RELX is a global provider of information-based analytics and decision tools for professional and business customers. The company focuses on enabling its clients to make better decisions, improve results, and enhance productivity by leveraging advanced technology and data. RELX serves various sectors, including Risk, Scientific, Technical & Medical, Legal, and Exhibitions, by offering specialized information and analytical tools that facilitate critical decision-making. The company is committed to corporate responsibility and delivering societal benefit through its products by contributing to scientific advancement, legal justice, and effective market transactions.

📋 Description

• Serve as the designated ISSO for FedRAMP-authorized systems • Maintain the organization's Authority to Operate and ongoing compliance • Lead monthly, quarterly, and annual FedRAMP continuous monitoring reporting • Coordinate annual assessments, independent audits, penetration testing, and security reviews with 3PAOs • Manage security communications with federal agencies, sponsoring organizations, and stakeholders • Conduct security risk assessments and vulnerability analyses • Review and monitor POA&M items through remediation • Evaluate security impacts of system changes and support Significant Change Request submissions • Ensure implementation and effectiveness of NIST 800-53 controls • Facilitate security reviews for architecture changes, technologies, and cloud deployments • Maintain FedRAMP security documentation and audit-ready compliance artifacts • Monitor security events, incidents, and compliance metrics • Validate remediation efforts and track compliance KPIs • Participate in security incident investigations and response • Partner with Engineering and DevOps to integrate compliance into development and deployment • Provide security guidance throughout the SDLC • Support cloud migration, modernization, and technology transformation initiatives • Ensure security awareness training meets FedRAMP requirements • Matrix manage resources participating in the FedRAMP Program

🎯 Requirements

• Bachelor's degree in Cybersecurity, Information Systems, Computer Science, Engineering, or related field; equivalent work experience may be considered in lieu of degree requirements • 5+ years of information security, cybersecurity, or compliance experience • 3+ years supporting FedRAMP, FISMA, or federal compliance programs • Experience maintaining FedRAMP Moderate or High authorized environments • Experience supporting security assessments, audits, and continuous monitoring activities • Experience with AWS, Azure, or Google Cloud • Strong understanding of FedRAMP requirements, NIST SP 800-53, NIST 800-37 RMF, FISMA, NIST 800-171, Zero Trust Architecture, vulnerability management, security operations, and incident response • Familiarity with SIEM platforms, vulnerability scanners, EDR, IAM, and cloud-native security services • Preferred: CISSP, CISM, GSLC, CAP, or equivalent cybersecurity certification • Preferred: experience acting as ISSO, Security Compliance Manager, or FedRAMP Program Manager • Preferred: experience supporting federal agencies or government contractors • Preferred: knowledge of automated compliance platforms and GRC tools • Preferred: experience leveraging AI and automation for compliance reporting, evidence collection, and POA&M management • Preferred: experience with AWS GovCloud or Azure Government environments

🏖️ Benefits

• Annual incentive bonus • Country-specific benefits • Accommodation or adjustment support during the hiring process

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume