Information System Security Officer – ISSO

Job not on LinkedIn

🔥 36 minutes ago

🦌 Connecticut, Florida, +11 more states – Remote

🦌 Connecticut – Remote 🐊 Florida – Remote 🌽 Illinois – Remote 🏖️ New Jersey – Remote 🌲 North Carolina – Remote 🏈 Ohio – Remote 🦀 Maryland – Remote 🍂 Massachusetts – Remote 🚗 Michigan – Remote 🔔 Pennsylvania – Remote 🤠 Texas – Remote ☕ Washington – Remote 🧀 Wisconsin – Remote

💵 $115.4k - $192.3k / year

⏰ Full Time

🟡 Mid-level

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 3%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

RELX

WebsiteLinkedInAll Job Openings

10,000+ employees

💼 Consulting

🏥 Healthcare

🛡️ Insurance

Consulting • Healthcare • Insurance

RELX is a global provider of information-based analytics and decision tools for professional and business customers. The company focuses on enabling its clients to make better decisions, improve results, and enhance productivity by leveraging advanced technology and data. RELX serves various sectors, including Risk, Scientific, Technical & Medical, Legal, and Exhibitions, by offering specialized information and analytical tools that facilitate critical decision-making. The company is committed to corporate responsibility and delivering societal benefit through its products by contributing to scientific advancement, legal justice, and effective market transactions.

📋 Description

• Serve as the designated ISSO for FedRAMP-authorized systems • Maintain the Authority to Operate and ongoing compliance activities • Lead monthly, quarterly, and annual FedRAMP continuous monitoring reporting • Coordinate annual assessments, independent audits, penetration testing, and security reviews with 3PAOs • Manage security communications with federal agencies, sponsoring organizations, and stakeholders • Conduct security risk assessments and vulnerability analyses • Monitor and remediate POA&M items • Evaluate security impacts of system changes and support Significant Change Request submissions • Ensure implementation and effectiveness of NIST 800-53 controls • Facilitate security reviews for architecture changes, technologies, and cloud deployments • Maintain FedRAMP security documentation and ensure evidence is audit-ready • Monitor security events, incidents, and compliance metrics • Validate remediation of security findings and track compliance KPIs • Participate in security incident investigations and response • Coordinate with security operations teams on threat identification and remediation • Support root cause analysis and corrective action planning • Partner with Engineering and DevOps to integrate compliance into development and deployment • Provide security guidance throughout the SDLC • Support cloud migration, modernization, and transformation initiatives • Ensure FedRAMP-compliant security awareness training • Matrix manage resources participating in the FedRAMP Program

🎯 Requirements

• Bachelor's degree in Cybersecurity, Information Systems, Computer Science, Engineering, or related field; equivalent work experience may be considered in lieu of degree requirements • 5+ years of information security, cybersecurity, or compliance experience • 3+ years supporting FedRAMP, FISMA, or federal compliance programs • Experience maintaining FedRAMP Moderate or High authorized environments • Experience supporting security assessments, audits, and continuous monitoring activities • Experience with AWS, Azure, or Google Cloud • Strong understanding of FedRAMP requirements, NIST SP 800-53, NIST 800-37 RMF, FISMA, NIST 800-171, Zero Trust Architecture, vulnerability management, security operations, and incident response • Familiarity with SIEM platforms, vulnerability scanners, EDR, IAM, and cloud-native security services • Preferred: CISSP, CISM, GSLC, CAP, or equivalent cybersecurity certification • Preferred: experience acting as ISSO, Security Compliance Manager, or FedRAMP Program Manager • Preferred: experience supporting federal agencies or government contractors • Preferred: knowledge of automated compliance platforms and GRC tools • Preferred: experience leveraging AI and automation for compliance reporting, evidence collection, and POA&M management • Preferred: experience with AWS GovCloud or Azure Government environments

🏖️ Benefits

• Annual incentive bonus • Country specific benefits • Reasonable accommodations and adjustments during hiring