Information System Security Officer - Isso
$109.5k - $230.7k+ Annual incentive bonus
Senior
Bachelor's
New Mexico, USA+46 moreMore locations: Washington, USA | Kansas, USA | Pennsylvania, USA | North Dakota, USA | Oregon, USA | Delaware, USA | Iowa, USA | Vermont, USA | Wyoming, USA | Connecticut, USA | Texas, USA | Montana, USA | New Hampshire, USA | Nevada, USA | South Carolina, USA | Boca Raton, FL, USA | South Dakota, USA | Georgia, USA | Arizona, USA | Mississippi, USA | Tennessee, USA | Virginia, USA | Arkansas, USA | Minnesota, USA | Colorado, USA | Nebraska, USA | Rhode Island, USA | Utah, USA | Kentucky, USA | West Virginia, USA | New York, NY, USA | Maryland, USA | Wisconsin, USA | Maine, USA | Massachusetts, USA | North Carolina, USA | Oklahoma, USA | Missouri, USA | Ohio, USA | New Jersey, USA | Indiana, USA | Louisiana, USA | Michigan, USA | Illinois, USA | Alabama, USA | Idaho, USA
Remote
CybersecuritySecurity Governance, Risk & Compliance
About the job
Requirements
- A bachelor's degree in Cybersecurity, Information Systems, Computer Science, Engineering, or a related field; equivalent work experience may be considered in lieu of a degree.
- At least 5 years of information security, cybersecurity, or compliance experience.
- At least 3 years supporting FedRAMP, FISMA, or federal compliance programs.
- Experience maintaining FedRAMP Moderate or High authorized environments.
- Experience supporting security assessments, audits, and continuous monitoring activities.
- Experience with cloud platforms such as AWS, Azure, or Google Cloud.
- Strong understanding of FedRAMP requirements, NIST Special Publication 800-53, NIST 800-37 Risk Management Framework, FISMA, NIST 800-171, Zero Trust Architecture principles, vulnerability management processes, security operations, and incident response.
- Familiarity with security technologies including SIEM platforms, vulnerability scanners, endpoint detection and response, Identity and Access Management, and cloud-native security services.
Responsibilities
- Serve as the designated Information System Security Officer for FedRAMP-authorized systems.
- Maintain the organization's Authority to Operate and support ongoing compliance activities.
- Lead FedRAMP continuous monitoring activities, including monthly, quarterly, and annual reporting requirements.
- Coordinate annual assessments, independent audits, penetration testing, and security reviews with Third Party Assessment Organizations.
- Manage security-related communications with federal agencies, sponsoring organizations, and stakeholders.
- Conduct security risk assessments and vulnerability analyses.
- Review, assess, and monitor Plan of Action and Milestones items through remediation.
- Evaluate security impacts of system changes and support Significant Change Request submissions.
- Ensure proper implementation and effectiveness of NIST 800-53 security controls.
- Facilitate security reviews for architecture changes, new technologies, and cloud deployments.
- Maintain FedRAMP security documentation, including the System Security Plan, Security Assessment Reports, Plan of Action and Milestones, Configuration Management Plan, Incident Response Plan, Continuous Monitoring Strategy, and Contingency Planning Documentation.
- Review and approve security documentation updates resulting from system changes.
- Ensure evidence collection and compliance artifacts are complete and audit-ready.
- Manage Plan of Action and Milestones deliverables for the sponsor.
- Monitor security events, incidents, and compliance metrics.
- Validate remediation efforts for identified security findings.
- Ensure required security assessments are completed according to established schedules.
- Track compliance key performance indicators and report status to leadership.
- Participate in security incident investigations and response efforts.
- Coordinate with security operations teams to ensure timely identification and remediation of threats.
- Support root cause analysis and corrective action planning following incidents.
- Review security monitoring tools and processes to improve detection and response capabilities.
- Partner with Engineering and DevOps teams to integrate compliance into system development and deployment processes.
- Provide security guidance throughout the software development life cycle.
- Support cloud migration, modernization, and technology transformation initiatives.
- Ensure compliance and security awareness training meet FedRAMP requirements.
- Matrix-manage resources participating in the FedRAMP Program.
Desired Qualifications
- A CISSP, CISM, GSLC, CAP, or equivalent cybersecurity certification.
- FedRAMP-specific experience acting as an Information System Security Officer, Security Compliance Manager, or FedRAMP Program Manager.
- Experience supporting federal agencies or government contractors.
- Knowledge of automated compliance platforms and Governance, Risk, and Compliance tools.
- Experience leveraging artificial intelligence and automation to streamline compliance reporting, evidence collection, and Plan of Action and Milestones management.
- Experience with AWS GovCloud or Azure Government environments.
About the company
LexisNexis Risk Solutions provides data, analytics, and decision tools to help organizations assess and manage risk across many industries. Its offerings combine large data sets with advanced analytics to support better decisions, improve operations, and protect consumers. By covering sectors like financial services, government, healthcare, insurance, retail, and public safety, the company helps customers evaluate likelihoods of risk, detect issues, and act more efficiently. The goal is to turn data into actionable insight that reduces risk, increases operational efficiency, and supports compliant, informed decision-making for its clients.
Company Size
5,001-10,000
Company Stage
N/A
Total Funding
N/A
Headquarters
Alpharetta, Georgia
Founded
1997
Get referred to LexisNexis Risk Solutions
See people who can refer or advise you
Simplify's Take
What believers are saying
- Arizona's Digital Birth Credential rollout expanded statewide June 1, 2026.
- Cytora, Epic, and Agenium integrations widen distribution across commercial, healthcare, and life insurance.
- 2026 reports show rising fraud, higher home severity, and SNAP losses $4.29 per dollar.
What critics are saying
- Choksi v. LexisNexis Risk Solutions and Ioane v. LexisNexis Risk Solutions expand FCRA exposure.
- Scroggins settled for $13.5 million after false deceased reports; data quality remains a liability.
- TransUnion, Experian Health, and Socure target adjacent identity and fraud budgets aggressively.
What makes LexisNexis Risk Solutions unique
- RELX-backed LexisNexis Risk Solutions spans fraud, insurance, healthcare, and government workflows.
- Emailage Adaptive, launched October 1, 2026, self-calibrates and cuts false positives 80%.
- FedRAMP In Process status and TxRAMP certification strengthen public-sector trust.
Help us improve and share your feedback! Did you find this helpful?
Benefits
- Health Insurance
- 401(k) Company Match
- Wellness Program
- Short-and-Long Term Disability
- Life Insurance
- Family Planning Benefits
- Health Savings Account/Flexible Spending Account
- Paid Vacation