Job Title: Lead Information System Security Officer (ISSO)
Location: Remote / Washington, DC/ Herndon, Virginia.
Status: Full-time
Clearance: Public Trust
Yakshna Solutions, Inc., (YSI) is a CMMI Level 3 assessed, ISO 9001, 20000:1, 27001 certified, woman-owned small business enterprises, headquartered in Herndon, Virginia, USA. YSI provides professional IT solutions and services to business corporations and government organizations. YSI is committed to serve its business communities as a leading IT vendor providing innovative, quality, and cost-effective IT business solutions and services.
We offer a competitive benefits package that includes the following: 401(k), health, dental, and vision insurance, Life insurance, short-term and long-term disability insurance, paid time off, training, and professional development assistance.
YSI is seeking a Lead ISSO to serve as the Contractor s primary single point of accountability for technical execution under this PWS and shall manage day-to-day ISSO support activities.
Job Responsibilities
- Serve as the Contractor s primary technical interface with the Government ISSM, CISO, AO/AODR, System Owners, and other Government-designated cybersecurity stakeholders.
- Direct Contractor ISSO activities; ensure consistent execution across supported systems.
- Oversee the development, review, quality control, and submission of authorization-package artifacts.
- Chair internal quality reviews of ISSO deliverables before Government submission
- Manage the Contractor s risk and issue register
- Escalate risks and issues to Government leadership, as appropriate.
- Participate in DFC governance forums on behalf of the Contractor
- Represent the Contractor in technical reviews.
- Coordinate with the Contractor s Program Manager for contract-level matters, including invoicing, staffing, and reporting.
- The Lead ISSO shall maintain hands-on cybersecurity expertise and shall not function solely as an administrative manager.
Required Skills & Experience
- Education: BS Degree in Computer Science, Cybersecurity, or IT related field.
- 8 years of relevant experience as an ISSO or in the IT field.
- Shall demonstrate working familiarity with cybersecurity-relevant tools and platforms used to support DFC ISSO, RMF, continuous monitoring, vulnerability management, audit readiness, and security operations activities. These tools and platforms include, without limitation
- CSAM as the authoritative GRC and authorization-package platform
- Splunk as the authoritative SIEM and log-analytics platform
- ServiceNow ITSM modules
- Tenable Nessus or Qualys vulnerability scanners
- Microsoft Defender for Endpoint, Identity, Cloud, and Microsoft 365
- Microsoft Intune and BigFix for endpoint configuration
- Microsoft Azure and Microsoft 365 security and compliance centers
- Microsoft Entra ID; Okta; Palo Alto Panorama; and Zscaler administration consoles.
- Preferred certifications: CISSP or CISM, plus CGRC. Additional certs to consider: CRISC, CISA, CCSP, CISSP-ISSMP, CySA+
Never miss an opportunity! Create an alert based on the job you applied for.