[Hiring] Senior Information System Security Officer @Dragonfli Group

Role Description

Dragonfli Group is seeking a Mid Information System Security Officer (ISSO) to own the security posture of assigned systems on a multi-year cybersecurity program for a large federal agency. You will:

• Advise on architecture, authorization boundaries, and risk decisions.
• Lead control compliance and assessment readiness for your systems, maintaining the System Security Plan and other key artifacts.
• Coordinate audits and assessments end to end.
• Run continuous monitoring and reporting, defining metrics that make posture legible to stakeholders.
• Escalate material risks with a recommended course of action.
• Drive vulnerability remediation and POA&M corrective actions, including exceptions, compensating controls, and risk acceptances.
• Execute Risk Management Framework tasks across categorization, control selection, implementation, assessment, and authorization in accordance with NIST SP 800-37.
• Support the transition to and management of an Ongoing Authorization program.
• Provide cybersecurity guidance to Business Owners and System Owners.
• Support System Owner system access reviews and account management compliance.
• Apply automation and AI tooling to streamline RMF documentation, control assessments, and continuous monitoring activities.

Qualifications

• Bachelor's degree in cybersecurity, information technology, or a related field.
• 4 years of ISSO experience, including ownership of security posture for one or more systems.
• Demonstrated experience maintaining SSPs and leading a system through assessment or authorization.
• Hands-on experience managing POA&Ms, including exceptions, compensating controls, and risk acceptances.
• Working knowledge of NIST SP 800-37 and NIST SP 800-53, and of continuous monitoring practice.
• Experience advising system owners or engineering teams on risk decisions.
• U.S. Citizenship or Permanent Residency, with all work performed within the continental U.S.
• Ability to pass a federal agency suitability or background investigation.

Requirements

• Prior federal contracting experience as an ISSO at a civilian agency (Preferred).
• Experience with Ongoing Authorization or continuous ATO programs (Preferred).
• Experience with a GRC platform such as Xacta, eMASS, CSAM, Archer, or ServiceNow IRM (Preferred).
• Cloud authorization experience, including FedRAMP inheritance and interconnection agreements (Preferred).
• Experience defining security metrics and reporting posture to non-technical stakeholders (Preferred).
• Certifications such as CISSP, CGRC (formerly CAP), CISM, or CCSP (Preferred).

Benefits

• Medical: Multiple POS health plan options including an HSA-compatible plan.
• Dental: PPO coverage for preventive, basic, and major services.
• Vision: Annual exam, frames, lenses, and contact lens allowance.
• 401(k): Employer match up to 5% of eligible compensation.
• Long-Term Disability: 100% employer-paid coverage at 50% of pre-disability earnings.
• Life Insurance & AD&D: 100% employer-paid coverage valued at $10,000 each.
• PTO: 15–25 days annually based on tenure.
• Paid Federal Holidays: All 11 federal holidays observed.