Information System Security Officer (ISSO)

Title: Information Systems Security Officer (ISSO)Location: Washington, DC (14th & Constitution Ave. NW) – Hybrid (Minimum 3 days onsite/week)Terms: Full-timeClearance: Must be a US Citizen and be able to obtain and maintain a Federal Security ClearanceTravel: 0%RESULTS. INNOVATION. VALUES. ACCOUNTABILITY.That’s RIVA. Our employee-first approach has manifested a culture that attracts the best and brightest. By investing in people first, and providing a flexible work environment, our employees have higher morale, higher productivity rates, and lower turnover. At RIVA, people are our #1 priority. Position Overview:
RIVA Solutions is hiring experienced ISSOs to support a variety of classified and sensitive systems under the Office of Security, Insider Risk, and Continuity (OSIRC) at the U.S. Department of Commerce. The ISSO(s) will be responsible for maintaining system compliance under federal cybersecurity frameworks including NIST RMF, FISMA, and DOC security policy. Assignments may include Emergency Notification Systems (ENS), Security Systems (SS), or other high-priority OSIRC-managed environments. Core Responsibilities:

• Serve as ISSO for one or more OSIRC systems (e.g., Emergency Notification, Security Systems)
• Perform routine self-assessment audits and ensure compliance with NIST 800-53, RMF, FISMA, FIPS 200, and DOC-specific requirements
• Review and develop system security plans and other required security documentation
•  Perform Certification and Accreditation (C&A) activities
• Develop and maintain ATO packages: SSPs, POA&Ms, Contingency Plans, Privacy Impact Assessments, etc.
• Conduct internal and external audits, risk assessments, and maintain audit readiness
• Support continuous monitoring and ongoing authorization efforts
• Upload artifacts and documentation to DOC-designated security tools
• Collaborate with government security stakeholders, system owners, and auditors
• Provide security incident support and implement remediation plans as needed
• Assist in addressing and compiling information for data calls

 Minimum Qualifications:

• U.S. Citizenship
• Must be able to obtain and maintain a Federal Security clearance
• Bachelor’s Degree in Information Technology, Business, or similar discipline OR Associates Degree and a professional certification OR experience in place of a degree with multiple professional certifications. 
• Experience working with FIPS 200, FISMA, the Privacy Act, and possess a working knowledge of risk management, and associated artifacts required by FISMA
• Minimum of 5 years of experience working directly with NIST 800 series frameworks with at minimum of 3 years in a federal ISSO role

 Preferred Qualifications:

• Experience supporting classified IT systems or environments with continuity/emergency functions
• Familiarity with OSIRC or Department of Commerce security operations and platforms
• Knowledge of insider risk, emergency response, or critical security infrastructure
• One or more current cybersecurity certifications (e.g., CISSP, CISM, CAP, Security+)

 Salary: Up to $120,000 a year, based on experience RIVA Benefits:

• Paid Time Off / Sick Leave
• Health, Dental, and Vision Coverage
• Life Insurance
• Retirement Benefits / 401K with company matching
• HSA/FSA Spending Accounts
• Long- and short-term disability
• Pet Insurance
• Wellness Program Initiatives
• RIVA Flex
• Additional Workplace Benefits

RIVA Solutions is an Equal Opportunity/Affirmative Action employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, veteran status, or any protected class. If you need a reasonable accommodation to search for a job opening or to submit an online application, please email accommodations@rivasolutionsinc.com. Only messages left for this purpose will be returned.