Mid-Level Information System Security Officer – System Owner Support

K2United

Information System Security Officer supporting federal health-sector client in navigating RMF and ATO processes. Developing documentation and ensuring compliance with cybersecurity requirements.

Posted 7/17/2026contractRemote • Maryland • 🇺🇸 United StatesMid-LevelSenior💰 $80,000 - $105,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in Risk Management Framework (RMF) processes, including the development of System Security Plans (SSPs) and Incident Response Plans (IRP). Proficient in ensuring compliance with federal cybersecurity requirements and facilitating training sessions for stakeholders.

Highest-signal resume keywords

Risk Management Framework (RMF)System Security Plans (SSPs)Incident Response Plans (IRP)NIST SP 800-53 Rev. 5Federal Cybersecurity Compliance

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Authorization Documentation DevelopmentContinuous Monitoring StrategiesBusiness Impact Analyses (BIAs)FIPS 199 CategorizationsPrivacy Threshold Assessments (PTA)Privacy Impact Assessments (PIA)Configuration Management PlansBoundary Scope Memorandums (BSM)System Architecture DiagramsTechnical Evidence Validation

Soft Skills

Strong Written CommunicationStakeholder EngagementTechnical Documentation Skills

Industry Keywords

Authority to Operate (ATO)Security Control Assessment (SCA)Final Assessment Report (SAR)FISMANIST SP 800-37NIST SP 800-18Contingency Plans (CP)Continuous Monitoring (ConMon) Plans

Tech Stack

Tools & technologies

Cyber Security

About the role

Key responsibilities & impact

Serve as a trusted security advisor to system owners, business owners, and technical teams
Guide systems through the Risk Management Framework (RMF) and support their Authority to Operate (ATO)
Develop and maintain authorization documentation, continuous monitoring strategies, contingency planning, and security guidance
Ensure client systems remain compliant with federal cybersecurity requirements
Support authorization package development while maintaining appropriate independence from formal Security Control Assessment (SCA) and Final Assessment Report (SAR) validation activities
Create foundational system documentation, including Boundary Scope Memorandums (BSM), System Architecture diagrams, and Authorization Boundary and Network Diagrams (ABND)
Validate technical evidence, including configuration artifacts, scan reports, and system documentation, to ensure compliance
Develop and maintain system-level Contingency Plans (CP), Incident Response Plans (IRP), and Continuous Monitoring (ConMon) Plans
Facilitate RMF training sessions, office hours, and user guidance

Requirements

What you’ll need

Bachelor's degree in a related field, or equivalent experience as allowed by company and contract policy
Four or more years of experience serving as an ISSO or supporting RMF authorization package development within a federal environment
Hands-on experience developing System Security Plans (SSPs), Business Impact Analyses (BIAs), FIPS 199 categorizations, Privacy Threshold and Privacy Impact Assessments (PTA/PIA), and Configuration Management Plans
Working knowledge of NIST SP 800-37 (RMF), NIST SP 800-53 Rev. 5, NIST SP 800-18, and FISMA
Experience developing, maintaining, and testing system-level Contingency Plans and Incident Response Plans
Strong written communication, stakeholder engagement, and technical documentation skills
Ability to meet federal background investigation requirements

Benefits

Comp & perks

401(k) with employer matching
Low-cost medical coverage for employees and their families
Paid time off
Paid leave for jury duty, military service, voting, and other qualifying events
Wellness stipend, including fitness reimbursement
Tuition assistance
Casual work environment
Technical training and certification support
Complimentary access to CareerSafe online training courses for employees and their immediate family