Information System Security Officer
$109.5k - $230.7k+ Annual incentive bonus
Senior
Bachelor's
New Mexico, USA+46 moreMore locations: Washington, USA | Kansas, USA | Pennsylvania, USA | North Dakota, USA | Oregon, USA | Delaware, USA | Iowa, USA | Vermont, USA | Wyoming, USA | Connecticut, USA | Texas, USA | Montana, USA | New Hampshire, USA | Nevada, USA | South Carolina, USA | Boca Raton, FL, USA | South Dakota, USA | Georgia, USA | Arizona, USA | Mississippi, USA | Tennessee, USA | Virginia, USA | Arkansas, USA | Minnesota, USA | Colorado, USA | Nebraska, USA | Rhode Island, USA | Utah, USA | Kentucky, USA | West Virginia, USA | New York, NY, USA | Maryland, USA | Wisconsin, USA | Maine, USA | Massachusetts, USA | North Carolina, USA | Oklahoma, USA | Missouri, USA | Ohio, USA | New Jersey, USA | Indiana, USA | Louisiana, USA | Michigan, USA | Illinois, USA | Alabama, USA | Idaho, USA
Hybrid
CybersecuritySecurity Governance, Risk & Compliance
Company Historically Provides H1B Sponsorship
About the job
Requirements
- A bachelor's degree in Cybersecurity, Information Systems, Computer Science, Engineering, or a related field is required; equivalent work experience may be considered in lieu of the degree.
- At least 5 years of information security, cybersecurity, or compliance experience.
- At least 3 years supporting FedRAMP, FISMA, or federal compliance programs.
- Experience maintaining FedRAMP Moderate- or High-authorized environments.
- Experience supporting security assessments, audits, and continuous monitoring activities.
- Experience with cloud platforms such as AWS, Azure, or Google Cloud.
- Strong understanding of FedRAMP requirements, NIST SP 800-53, NIST 800-37 Risk Management Framework, FISMA, NIST 800-171, Zero Trust Architecture principles, vulnerability management processes, security operations, and incident response.
- Familiarity with security technologies including SIEM platforms, vulnerability scanners, endpoint detection and response, identity and access management, and cloud-native security services.
Responsibilities
- Serve as the designated ISSO for FedRAMP-authorized systems.
- Maintain the organization's Authority to Operate and support ongoing compliance activities.
- Lead FedRAMP continuous monitoring activities, including monthly, quarterly, and annual reporting requirements.
- Coordinate annual assessments, independent audits, penetration testing, and security reviews with Third Party Assessment Organizations.
- Manage security-related communications with federal agencies, sponsoring organizations, and stakeholders.
- Conduct security risk assessments and vulnerability analyses.
- Review, assess, and monitor Plan of Action & Milestones items through remediation.
- Evaluate security impacts of system changes and support Significant Change Request submissions.
- Ensure proper implementation and effectiveness of NIST 800-53 security controls.
- Facilitate security reviews for architecture changes, new technologies, and cloud deployments.
- Maintain FedRAMP security documentation, including the System Security Plan, Security Assessment Reports, Plan of Action & Milestones, Configuration Management Plan, Incident Response Plan, Continuous Monitoring Strategy, and Contingency Planning Documentation.
- Review and approve security documentation updates resulting from system changes.
- Ensure evidence collection and compliance artifacts are complete and audit-ready.
- Manage Plan of Action & Milestones deliverables for the sponsor.
- Monitor security events, incidents, and compliance metrics.
- Validate remediation efforts for identified security findings.
- Ensure required security assessments are completed according to established schedules.
- Track compliance key performance indicators and report status to leadership.
- Participate in security incident investigations and response efforts.
- Coordinate with security operations teams to ensure timely identification and remediation of threats.
- Support root cause analysis and corrective action planning following incidents.
- Review security monitoring tools and processes to improve detection and response capabilities.
- Partner with Engineering and DevOps teams to integrate compliance into system development and deployment processes.
- Provide security guidance throughout the software development lifecycle.
- Support cloud migration, modernization, and technology transformation initiatives.
- Ensure compliance and security awareness training meet FedRAMP requirements.
- Matrix-manage resources participating in the FedRAMP Program.
Desired Qualifications
- CISSP, CISM, GSLC, CAP, or equivalent cybersecurity certification.
- FedRAMP-specific experience acting as an ISSO, Security Compliance Manager, or FedRAMP Program Manager.
- Experience supporting federal agencies or government contractors.
- Knowledge of automated compliance platforms and Governance, Risk, and Compliance tools.
- Experience leveraging AI and automation to streamline compliance reporting, evidence collection, and Plan of Action & Milestones management.
- Experience with AWS GovCloud or Azure Government environments.
About the company
RELX is a global provider of information-based analytics and decision tools for professionals across scientific, technical, medical, legal, risk, business, and exhibitions industries. It operates in four segments: Scientific, Technical & Medical; Risk & Business Analytics; Legal; and Exhibitions. Its products combine large datasets, analytics, and decision-support tools to help researchers, healthcare professionals, lawyers, and business leaders make informed choices, improve productivity, and achieve better outcomes. Revenue mainly comes from subscriptions, with additional income from transactional sales and advertising. RELX differentiates itself through its deep data assets, specialized industry knowledge, and multi-segment offerings that span content, analytics, and decision-support services. The company pursues a goal of delivering trusted information and insights while supporting corporate responsibility and alignment with the UN SDGs through its products and partnerships.
Company Size
1,001-5,000
Company Stage
IPO
Headquarters
London, United Kingdom
Founded
1894
Get referred to RELX
See people who can refer or advise you
Simplify's Take
What believers are saying
- H1 2026 revenue grew 7%; Legal grew 10%; Risk grew 8%.
- February 24, 2026 Lexis+ with Protégé launched globally, expanding AI workflow adoption.
- September 3, 2026 Doctrine closes, targeting one million European legal professionals.
What critics are saying
- Anthropic and Thomson Reuters compressed legal AI pricing after February 2026 market shock.
- Harvey and Legora court law schools in 2026, training future buyer cohorts elsewhere.
- Exhibitions face Middle East event uncertainty through 2026, threatening margins and calendar-dependent cash flows.
What makes RELX unique
- LexisNexis’ 200 billion-document corpus still beats generic legal AI models.
- September 3, 2026 Doctrine acquisition deepens RELX’s European legal AI workflow moat.
- H1 2026 subscriptions supplied 62% of revenue, stabilizing cash generation.
Help us improve and share your feedback! Did you find this helpful?
Benefits
- Health Insurance
- Dental Insurance
- Vision Insurance
- Life Insurance
- Disability Insurance
- 401(k) Retirement Plan
- 401(k) Company Match
- Wellness Program
- Mental Health Support
- Family Planning Benefits
- Health Savings Account/Flexible Spending Account
- Flexible Work Hours