ISSO / Security Compliance Analyst
Job Description
Job Description
We are a growing information technology company that offers its employees a culture of success, the chance to work on revolutionary federal IT infrastructure, and the opportunity to grow alongside cutting-edge technology that is reshaping the industry. We are seeking forward-thinking candidates that have strong experience in operational support and can help take to the next level in a proactive stance.
Chameleon Integrated Services has expertise in operations management, quality systems, data operations and cybersecurity. We secure some of the most sensitive data for the Department of Defense and for other U.S. federal government agencies. We are known for the great care we take with clients and employees, and we believe in promoting from within.
We offer a Full Benefits package including:
- Competitive Employee Health Insurance options including dental
- 100% company paid vision plan
- 401K plan with generous company match and no vesting period
- 100% company paid life insurance
- 100% company paid long and short-term disability insurance
- Training allowance
- PTO and more
ISSO / Security Compliance Analyst
- Must be a United States citizen.
- Must be eligible for a Tier 4 High-Risk Public Trust investigation.
- Strong preference for a current or recently favorably adjudicated Tier 4 or Tier 5 investigation.
Role:
Provide system-level ISSO support under the direction of the Lead and Senior ISSOs. Maintain security records, collect and validate evidence, update CSAM records, track POA&Ms, reconcile ServiceNow actions, support access and account reviews, prepare recurring reports, and coordinate with system owners and technical teams.
This position carries an assigned system portfolio and is not limited to clerical documentation. The analyst must understand the relationship among system architecture, controls, vulnerabilities, changes, incidents, evidence, and authorization status.
Minimum Requirements:
- At least 4 years of cybersecurity, information assurance, compliance, assessment, or ISSO experience
- At least 2 years supporting federal systems
- Working knowledge of:
- NIST SP 800-37
- NIST SP 800-53
- SSPs
- POA&Ms
- Security-control evidence
- Continuous monitoring
- Change-impact analysis
- Experience using at least one GRC platform:
- CSAM
- eMASS
- Xacta
- Archer
- ServiceNow GRC
- Experience using ServiceNow or another ITSM platform
- Ability to review evidence for currency, completeness, ownership, and traceability
- Security+ required or obtainable before start
- Bachelor’s degree preferred but not required
Competitive Differentiators:
- CSAM experience
- FISMA Moderate systems
- Tenable, Qualys, or Splunk experience
- Azure Government or Microsoft 365 GCC/GCC High
- FedRAMP documentation
- Audit evidence collection and response
- Current federal suitability
- CGRC certification
The resume must clearly identify:
- Systems supported
- GRC and ITSM tools used
- Artifacts maintained
- POA&M responsibilities
- Evidence collection and validation work
- Audit or assessment support
- Security impact analysis or change-control involvement
- Measurable backlog, timeliness, quality, or closure results
“We are an equal opportunity employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, sexual orientation, gender identity, disability or protected veteran status”
Texting Privacy Policy
- Message type: Informational; you will receive text messages regarding your application and potentially regarding interview scheduling.
- No mobile information will be shared with third parties/affiliates for marketing/promotional purposes.
- Message frequency will vary depending on the application process.Msg & data rates may apply.
- OPT out at any time by texting "Stop".
Powered by JazzHR
nrn9NuBTqj