Information Systems Security Officer Jobs in Virginia
Information Systems Security Officer jobs in Virginia are concentrated in the Northern Virginia corridor, Richmond, and Hampton Roads, where defense contractors, federal agencies, and major technology employers drive consistent demand for ISSO professionals. Booz Allen Hamilton, Leidos, and Northrop Grumman maintain a large hiring presence across the state, recruiting for roles in security authorization, risk management framework compliance, and cloud security. Openings range from mid-level practitioners working toward their first Authorization to Operate to senior ISSOs leading enterprise-wide security programs. Find a role that fits below and apply directly.
Find JobsOverview
Showing 5 of 29+ Information Systems Security Officer jobs
Years of Experience: 7-10 Years of Experience
Salary: The salary offered within this range will depend on the candidate's relevant experience, qualifications, and security clearance.
Briefly Describe the Work: GITI is seeking an Information Systems Security Officer (ISSO) to ensure the confidentiality, integrity, and availability of critical federal and defense systems to support a General Services Administration (GSA) contract. You will play a vital role in navigating the Risk Management Framework (RMF) lifecycle by conducting continuous monitoring and ensuring compliance with federal mandates. The ideal candidate is highly organized, detail-oriented, and excels at tracking compliance artifacts and vulnerability remediation within highly regulated environments across various government agencies.
Core Responsibilities:
- Navigate the system through the 6-step Risk Management Framework (RMF) lifecycle in accordance with FISMA requirements.
- Conduct daily, weekly, and monthly continuous monitoring activities, including audit log reviews and account management audits.
- Coordinate with system administrators to apply security hardening guidelines (e.g., DISA STIGs, CIS Benchmarks) and track the remediation of vulnerability scan results.
- Develop, maintain, and update critical security documentation, including System Security Plans (SSPs) and Plan of Action & Milestones (POA&Ms).
- Gather and track artifacts and evidence to prove control compliance for internal and external audits.
- Utilize and maintain records within government Governance, Risk, and Compliance (GRC) systems (e.g., eMASS, Xacta, CSAM, or Archer).
- Report security incidents or unauthorized activities immediately to the ISSM and appropriate incident response teams.
Required Skills:
- Professional experience in Information Assurance, cybersecurity compliance, or systems administration.
- Deep understanding of the RMF process (NIST 800-37) and NIST 800-53 security controls.
- Familiarity with agency-specific control overlays and policies (e.g., CNSSI 1253 for the IC, DHS 4300A, or DoD SRGs).
- Experience with vulnerability scanning and auditing tools (e.g., Tenable/Nessus/ACAS, Qualys, Splunk).
- Excellent problem-solving and analytical skills to track complex security issues.
- Demonstrated hands-on experience in Agile delivery models (ex. SCRUM, Kanban, SAFe) and a DevSecOps framework.
Desired Skills:
- Experience working alongside DevSecOps and IT operations teams.
- Familiarity with zero-trust network principles.
Preferred Certifications:
- DoD 8140/8570 IAM/IAT Level II certification (e.g., Security+ CE, CAP/CGRC, or CySA+)
Global InfoTek, Inc. is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, or protected veteran status.
About Global InfoTek, Inc. Global InfoTek Inc. has an award-winning track record of designing, developing, and deploying best-of-breed technologies that address the nation's pressing cyber and advanced technology needs. GITI has rapidly merged pioneering technologies, operational effectiveness, and best business practices for over two decades.
Years of Experience: 7-10 Years of Experience
Salary: The salary offered within this range will depend on the candidate's relevant experience, qualifications, and security clearance.
Briefly Describe the Work: GITI is seeking an Information Systems Security Officer (ISSO) to ensure the confidentiality, integrity, and availability of critical federal and defense systems to support a General Services Administration (GSA) contract. You will play a vital role in navigating the Risk Management Framework (RMF) lifecycle by conducting continuous monitoring and ensuring compliance with federal mandates. The ideal candidate is highly organized, detail-oriented, and excels at tracking compliance artifacts and vulnerability remediation within highly regulated environments across various government agencies.
Core Responsibilities:
- Navigate the system through the 6-step Risk Management Framework (RMF) lifecycle in accordance with FISMA requirements.
- Conduct daily, weekly, and monthly continuous monitoring activities, including audit log reviews and account management audits.
- Coordinate with system administrators to apply security hardening guidelines (e.g., DISA STIGs, CIS Benchmarks) and track the remediation of vulnerability scan results.
- Develop, maintain, and update critical security documentation, including System Security Plans (SSPs) and Plan of Action & Milestones (POA&Ms).
- Gather and track artifacts and evidence to prove control compliance for internal and external audits.
- Utilize and maintain records within government Governance, Risk, and Compliance (GRC) systems (e.g., eMASS, Xacta, CSAM, or Archer).
- Report security incidents or unauthorized activities immediately to the ISSM and appropriate incident response teams.
Required Skills:
- Professional experience in Information Assurance, cybersecurity compliance, or systems administration.
- Deep understanding of the RMF process (NIST 800-37) and NIST 800-53 security controls.
- Familiarity with agency-specific control overlays and policies (e.g., CNSSI 1253 for the IC, DHS 4300A, or DoD SRGs).
- Experience with vulnerability scanning and auditing tools (e.g., Tenable/Nessus/ACAS, Qualys, Splunk).
- Excellent problem-solving and analytical skills to track complex security issues.
- Demonstrated hands-on experience in Agile delivery models (ex. SCRUM, Kanban, SAFe) and a DevSecOps framework.
Desired Skills:
- Experience working alongside DevSecOps and IT operations teams.
- Familiarity with zero-trust network principles.
Preferred Certifications:
- DoD 8140/8570 IAM/IAT Level II certification (e.g., Security+ CE, CAP/CGRC, or CySA+)
Global InfoTek, Inc. is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, or protected veteran status.
About Global InfoTek, Inc. Global InfoTek Inc. has an award-winning track record of designing, developing, and deploying best-of-breed technologies that address the nation's pressing cyber and advanced technology needs. GITI has rapidly merged pioneering technologies, operational effectiveness, and best business practices for over two decades.
See All 29 Information Systems Security Officer Jobs in Virginia
Find roles in Virginia that match your experience and apply in just a few clicks.
Find JobsInformation Systems Security Officer Jobs by City in Virginia
Where Virginia roles are concentrated, by current openings.
Information Systems Security Officer Job Market in Virginia
A snapshot from current Virginia openings, updated as new roles post.
Who's Hiring
What Virginia Employers Look For
The qualifications that appear most often in information systems security officer jobs across Virginia.
- Active DoD Secret or Top Secret clearance required for most Virginia ISSO positions
- CISSP, CAP, or Security+ certification strongly preferred or required by hiring managers
- Demonstrated experience applying the NIST Risk Management Framework and FISMA compliance standards
- Bachelor's degree in information systems, cybersecurity, computer science, or a related technical field
- Hands-on experience with eMASS or Xacta for security authorization package development and tracking
- Familiarity with DISA STIGs and vulnerability management tools such as Nessus or Tenable
Information Systems Security Officer Jobs in Virginia: Frequently Asked Questions
How do you become a information systems security officer in Virginia?
Most Virginia employers expect a bachelor's degree in cybersecurity, information systems, or a related field, combined with a DoD-recognized certification such as CISSP, CAP, or Security+. Because the state's market is heavily shaped by federal contracting, demonstrating practical knowledge of NIST 800-37 and the Risk Management Framework is essential. Obtaining a DoD security clearance early, even at the Secret level, substantially widens the pool of accessible positions in Northern Virginia and the Hampton Roads region.
Which companies hire information systems security officers in Virginia?
Companies currently hiring information systems security officers in Virginia include SAIC, Guidehouse, and CACI International, per current listings on Migrate Mate as of November 2026. Virginia's dense concentration of defense and intelligence contractors makes it one of the most active states nationally for ISSO hiring year-round.
Which Virginia cities have the most information systems security officer jobs?
Springfield, McLean, and Arlington hold the most information systems security officer openings in Virginia. Northern Virginia dominates because of its proximity to the Pentagon, federal intelligence agencies, and the headquarters of major defense contractors, while Richmond draws openings from state government IT offices and financial sector employers, and Hampton Roads is anchored by Naval Station Norfolk and the defense ecosystem surrounding it.
Are there remote information systems security officer jobs in Virginia?
Yes, though many positions require on-site access to classified systems or government facilities. About 36% of information systems security officer openings tied to Virginia are remote or hybrid as of November 2026, reflecting the clearance and system-access requirements common in this role. Tasks involving security documentation, policy review, and risk assessments are the most likely to be performed remotely when employers permit it.
How can I get hired as a information systems security officer in Virginia with little or no experience?
The most realistic entry path is moving into an ISSO role from an adjacent position such as systems administrator, IT security analyst, or help desk technician, where you already touch access controls or vulnerability management tools. Large Virginia contractors like Booz Allen Hamilton and Leidos run associate and early-career programs that accept candidates with Security+ certification and a clearance rather than years of ISSO-specific history. Building a portfolio of RMF documentation samples and pursuing the CompTIA Security+ or entry-level ISC2 Certified in Cybersecurity credential gives candidates a measurable edge when applying to junior or associate ISSO postings.
Where can I find and apply to information systems security officer jobs in Virginia?
You can find and apply to information systems security officer jobs in Virginia on Migrate Mate, which lists current Virginia openings across the state. Find the roles that fit your experience and clearance level and apply directly.
See All 29 Information Systems Security Officer Jobs in Virginia
Find roles in Virginia that match your experience and apply in just a few clicks.
Find Jobs