Job Title : Senior Information Systems Security Officer (ISSO)
Location : Columbia, SC – 100% Onsite (Second interview onsite required)
Employment Type : Long-Term Contract, W2 only (no third-party candidates please)
Overview
We are seeking a Senior Information Systems Security Officer (ISSO) to lead security, risk, and compliance activities in support of enterprise-level cybersecurity initiatives. This role is fully onsite in Columbia, SC, and requires strong collaboration with leadership, business units, and vendors to ensure systems meet Federal, State, and industry security standards.
Key Responsibilities
- Direct the establishment, implementation, and enhancement of security and compliance efforts aligned with FISMA, NIST, HIPAA, CMS MARS-E, and other regulatory frameworks.
- Oversee development and maintenance of security documentation including System Security Plans (SSPs), Privacy Impact Assessments (PIAs), and Interconnection Security Agreements (ISAs).
- Perform detailed architectural reviews, risk assessments, and compliance audits of systems and vendor solutions.
- Support and guide cross-functional teams in designing secure, compliant solutions across infrastructure, applications, and cloud services.
- Serve as primary liaison for third-party audits, assessments, and regulatory reviews.
- Mentor and guide team members, promoting best practices in security and compliance.
Required Skills & Experience
5+ years of experience with IT systems including IBM System 390 / zSeries, Windows, Linux, networking, and databases.Strong working knowledge of FISMA, NIST, CMS MARS-E, and HIPAA security / privacy requirements.Prior experience in a FISMA-compliant program and working with eGRC systems.Background in Health IT environments preferred.ISC(2), ISACA, SANS GIAC, or similar security certification required.Ability to manage multiple priorities, work independently, and collaborate across technical and business teams.Strong communication skills with ability to engage both technical and non-technical stakeholders.Preferred Qualifications
Bachelor's degree in Computer Science, Information Security, or related field (or 10+ years equivalent experience).ITIL experience in Information Security Management.Experience with Archer eGRC, SIEM solutions, IAM platforms, and security in cloud environments.