Security Lead / Information System Security Officer (ISSO)
Company: SMX Services & Consulting, Inc.
Employment: Full-Time, W-2
Compensation: $73.69-$76.58/hour
Client: Federal Government - HHS/ACF Office of Refugee Resettlement (ORR)
Status: Contingent upon contract award
Duration: 12-month base + four 12-month option periods
Work Arrangement: Primarily remote
Position Overview
SMX is seeking an experienced Security Lead / ISSO to lead cybersecurity, compliance, continuous monitoring, and Authority to Operate (ATO) support for the ORR Learning Center, including its SAP SuccessFactors Learning platform and related cloud, identity, data, and system integrations.
The Security Lead will work closely with Government cybersecurity teams, program management, technical personnel, and SAP/SAP NS2 to maintain the system's security posture and Federal authorization requirements.
Key Responsibilities
Serve as the primary Security Lead/ISSO for the ORR Learning Center.
Maintain and support the system's ATO and required security documentation.
Implement and monitor NIST SP 800-53 security controls and supporting evidence.
Coordinate continuous monitoring, vulnerability scanning, remediation, and reporting.
Manage and track POA&Ms and corrective actions.
Support Federal security assessments, audits, and FedRAMP-related requirements
.
Coordinate security activities with Government and SAP/SAP NS2 personnel.
Review system and configuration changes for cybersecurity impact.
Support identity and access management (IAM)
, privileged access, and role-based access controls.
Support Zero Trust principles and security improvements.
Coordinate incident response and security-event activities.
Maintain security policies, procedures, compliance artifacts, and audit documentation.
Ensure vulnerabilities and security findings are appropriately tracked through resolution.
Core Qualifications
Strong candidates should have experience with:
Federal ISSO / cybersecurity compliance responsibilities.
ATO lifecycle and authorization packages
.
NIST SP 800-53 controls.
Continuous monitoring and vulnerability management.
POA&M management and remediation.
FedRAMP or Federal cloud security environments.
Security assessments and audits.
Identity and access management.
Incident response and security-event coordination.
Configuration and change-management security reviews.
Security documentation, evidence, and compliance reporting.
Key Personnel Requirement
This is a Key Personnel position supporting a Federal Government procurement. The candidate's resume should clearly demonstrate relevant Federal cybersecurity, ISSO, ATO, NIST, and compliance experience
.
Compensation: $73.69-$76.58/hour W-2
SMX Services & Consulting, Inc. is an Equal Opportunity Employer.