ISSO Team Lead

Be Challenged and Make a Difference

In a world of technology, people make the difference. We believe if we invest in great people, then great things will happen. At AnaVation, we provide unmatched value to our customers and employees through innovative solutions and an engaging culture.

Description of Task to be Performed:

AnaVation is seeking an Information System Security Officer (ISSO) Team Lead to support a key client in Washington DC. This individual will provide expert level guidance and leadership in implementing, maintaining, and enforcing information security policies, standards, and methodologies in accordance with federal regulations and agency requirements. This is a working Team Lead role.

What you will be doing

Directly oversee ISSO team members including technical guidance and training, mentorship, performance management, and day-to-day work assignments

Develop, review, and update system documentation and FISMA-compliant SA&A packages (e.g., SSP, IRP, SOP, POA&Ms, CMP, IPA, PIA, SORN) in accordance with client policies and procedures to obtain/maintain system accreditation (e.g., ATT, ATO, ATU, OA) using established processes

Advise the Authorizing Official (AO) and System Owner (SO) on cybersecurity matters related to assigned information systems across all NIST RMF phases, including system categorization, control baselines, control assessments, document and track weaknesses, and oversee corrective actions.

Serve as a member of the CCB to ensure system security requirements are addressed

Monitor cybersecurity status of information systems throughout the system lifecycle

Establish and regularly review audit trails, providing audit logs upon request

Provide RMF process subject matter expertise across all FISMA-reportable systems

Conduct SCA per NIST 800-53A, OMB A-130, OMB A-123, and client policies and schedules; report control gaps or weaknesses, risk levels, cost-benefit analysis, and impact to the client

Maintain a full inventory of hardware and software for the information system

Develop, coordinate, test, and train staff on Contingency Plans and Incident Response Plans; support Incident Response and DR/COOP activities

Scan applications, networks, and databases; identify vulnerabilities