{"schemaVersion":"jobsearcher.job.v1","id":"7e131b2ba1e55fcbc997ea2f","url":"https://jobsearcher.com/jobs/7e131b2ba1e55fcbc997ea2f","canonicalUrl":"https://jobsearcher.com/jobs/7e131b2ba1e55fcbc997ea2f","title":"Geospatial ISSO - DHS","description":"cFocus Software seeks a Geospatial ISSO to join our program supporting the Department of Homeland Security (DHS). This position is remote. This position requires a Public Trust Clearance.\n\nQualifications:\nBachelor’s or master’s degree in IT, Computer Science, Geography or a related field.\n6+ years of cybersecurity or information-assurance experience, including at least five years performing ISSO, system-security, RMF, authorization, compliance, or continuous-monitoring responsibilities for federal information systems.\nDemonstrated experience implementing and assessing NIST SP 800-53 security controls and maintaining SSPs, authorization artifacts, POA&Ms, control evidence, and continuous-monitoring records.\nExperience supporting FISMA authorization and ongoing authorization, ATO/ATC activities, vulnerability and patch management, security assessments, audit/data-call responses, and change-control security reviews.\nKnowledge of DHS MD 4300A or comparable federal sensitive-system policy, NIST Risk Management Framework, NIST SP 800-37, NIST SP 800-53, NIST SP 800-137, FISMA, OMB A-130, and federal privacy/security requirements.\nExperience analyzing authenticated scan results, adjudicating findings, coordinating remediation, validating evidence, and reporting security posture and risk to Government stakeholders.\nAbility to advise a Government System Owner and collaborate effectively with engineers, developers, administrators, architects, cloud teams, privacy personnel, assessors, and program leadership.\nStrong technical writing, analysis, organization, communication, and documentation-quality skills.\nAbility to satisfy DHS suitability, background-investigation, Entry on Duty, security, and system-access requirements for the assigned position.\nActive CISSP, CISM, GSLC, CAP/CGRC, CASP+, or another advanced information-security or risk-management certification.\nExperience serving as an ISSO for DHS, another federal civilian agency, or a mission-critical FISMA Moderate/High system.\nWorking knowledge of ESRI Portal/ArcGIS Enterprise, ArcGIS Online, geospatial web services, enterprise geodatabases, custom GIS applications, or location-intelligence environments.\nExperience securing AWS or other enterprise cloud environments, identity and access integrations, APIs, web applications, data pipelines, and hybrid infrastructures.\nExperience with DHS ISVM processes and Swimlane or comparable vulnerability/compliance workflow platforms.\nExperience with privacy compliance, interconnection agreements, contingency planning and exercises, Section 508, IPv6, DevSecOps, or system-security engineering\nDuties:\nServe as the principal advisor to the GII System Owner on cybersecurity requirements, risk, compliance, authorization posture, control effectiveness, and security impacts across geospatial capabilities.\nInterpret and apply DHS MD 4300A Sensitive Systems Policy, DHS security authorization guidance, FISMA, OMB and NIST requirements, DHS privacy rules, and other applicable directives throughout the Systems Engineering Life Cycle.\nCoordinate with GMO leadership, developers, system administrators, architects, cloud providers, data managers, technical support, privacy personnel, DHS security organizations, and other enterprise stakeholders.\nAssess emerging technical, operational, and geospatial requirements for security implications and provide timely, risk-informed recommendations to the System Owner and program leadership.\nMaintain clear separation of authority: provide guidance and recommendations while preserving final Government decisions, approvals, risk acceptance, and signatures\nEnsure implementation, maintenance, and evidence of management, operational, and technical security controls required by the GII System Security Plan (SSP) and DHS policy.\nMaintain the SSP and supporting authorization documentation so that system boundaries, components, data flows, interfaces, control implementation statements, responsibilities, and evidence reflect the current operating environment.\nCoordinate control implementation and evidence collection for ESRI Portal, ArcGIS Online, AWS-hosted applications and infrastructure, identity and access services, geospatial data services, custom applications, networks, and enterprise integrations.\nIdentify control gaps, weaknesses, dependencies, and inherited-control issues; assign or coordinate remediation ownership and track corrective actions through approved processes.\nSupport annual SSP updates and other security-documentation refreshes required by the DHS authorization and compliance lifecycle.\nExecute the GII Information Security Continuous Monitoring (ISCM) program and provide current visibility into system assets, vulnerabilities, configuration, control effectiveness, and changes in security posture.\nCoordinate and review credentialed/authenticated scans and other automated security-management outputs in accordance with the current ISCM strategy.\nReview, validate, and adjudicate findings from continuous monitoring, vulnerability diagnosis, patching, configuration assessment, and mitigation activities.\nPerform and document monthly ISCM review and adjudication activities, maintain traceable evidence, identify trends and recurring weaknesses, and escalate material risks.\nCoordinate with operations and engineering teams on monthly patching, emergency fixes, vulnerability remediation, and follow-up validation while minimizing mission disruption.\nMaintain dashboards, metrics, findings status, and decision-support reporting needed to demonstrate confidentiality, integrity, availability, and continued authorization\nPrepare, maintain, validate, and organize artifacts supporting assessment, authorization, certification/accreditation, Authority to Operate (ATO), and Authority to Connect (ATC) activities.\nCoordinate evidence requests, control assessments, security testing, authorization reviews, and remediation activities with assessors, technical teams, program personnel, and DHS stakeholders.\nMaintain an authorization-ready posture by ensuring artifacts are accurate, current, internally consistent, traceable, and aligned with the operational environment.\nRespond to DHS cybersecurity investigations, data calls, and requests for information concerning the GII security posture.\nSupport compliance reporting and corrective actions arising from security assessments, audits, vulnerability reviews, and Government direction.\nZh8TI6ZfAx","company":"Cfocus Software","rawCompany":"cfocus software","city":"Remote","state":"OR","isRemote":false,"isActive":false,"createdAt":"2026-08-08T14:03:31.928Z","occupations":[{"code":"15-1299.02","title":"Geographic Information Systems Technologists and Technicians","slug":"geographic-information-systems-technologists-and-technicians"},{"code":"15-1212.00","title":"Information Security Analysts","slug":"information-security-analysts"},{"code":"15-1299.08","title":"Computer Systems Engineers/Architects","slug":"computer-systems-engineers-architects"}],"industries":[{"code":"541690","title":"Other Scientific and Technical Consulting Services","slug":"other-scientific-and-technical-consulting-services"},{"code":"541512","title":"Computer Systems Design Services","slug":"computer-systems-design-services"},{"code":"541370","title":"Surveying and Mapping (except Geophysical) Services","slug":"surveying-and-mapping-except-geophysical-services"}],"jobPosting":{"@context":"https://schema.org","@type":"JobPosting","title":"Geospatial ISSO - DHS","description":"cFocus Software seeks a Geospatial ISSO to join our program supporting the Department of Homeland Security (DHS). This position is remote. This position requires a Public Trust Clearance.\n\nQualifications:\nBachelor’s or master’s degree in IT, Computer Science, Geography or a related field.\n6+ years of cybersecurity or information-assurance experience, including at least five years performing ISSO, system-security, RMF, authorization, compliance, or continuous-monitoring responsibilities for federal information systems.\nDemonstrated experience implementing and assessing NIST SP 800-53 security controls and maintaining SSPs, authorization artifacts, POA&Ms, control evidence, and continuous-monitoring records.\nExperience supporting FISMA authorization and ongoing authorization, ATO/ATC activities, vulnerability and patch management, security assessments, audit/data-call responses, and change-control security reviews.\nKnowledge of DHS MD 4300A or comparable federal sensitive-system policy, NIST Risk Management Framework, NIST SP 800-37, NIST SP 800-53, NIST SP 800-137, FISMA, OMB A-130, and federal privacy/security requirements.\nExperience analyzing authenticated scan results, adjudicating findings, coordinating remediation, validating evidence, and reporting security posture and risk to Government stakeholders.\nAbility to advise a Government System Owner and collaborate effectively with engineers, developers, administrators, architects, cloud teams, privacy personnel, assessors, and program leadership.\nStrong technical writing, analysis, organization, communication, and documentation-quality skills.\nAbility to satisfy DHS suitability, background-investigation, Entry on Duty, security, and system-access requirements for the assigned position.\nActive CISSP, CISM, GSLC, CAP/CGRC, CASP+, or another advanced information-security or risk-management certification.\nExperience serving as an ISSO for DHS, another federal civilian agency, or a mission-critical FISMA Moderate/High system.\nWorking knowledge of ESRI Portal/ArcGIS Enterprise, ArcGIS Online, geospatial web services, enterprise geodatabases, custom GIS applications, or location-intelligence environments.\nExperience securing AWS or other enterprise cloud environments, identity and access integrations, APIs, web applications, data pipelines, and hybrid infrastructures.\nExperience with DHS ISVM processes and Swimlane or comparable vulnerability/compliance workflow platforms.\nExperience with privacy compliance, interconnection agreements, contingency planning and exercises, Section 508, IPv6, DevSecOps, or system-security engineering\nDuties:\nServe as the principal advisor to the GII System Owner on cybersecurity requirements, risk, compliance, authorization posture, control effectiveness, and security impacts across geospatial capabilities.\nInterpret and apply DHS MD 4300A Sensitive Systems Policy, DHS security authorization guidance, FISMA, OMB and NIST requirements, DHS privacy rules, and other applicable directives throughout the Systems Engineering Life Cycle.\nCoordinate with GMO leadership, developers, system administrators, architects, cloud providers, data managers, technical support, privacy personnel, DHS security organizations, and other enterprise stakeholders.\nAssess emerging technical, operational, and geospatial requirements for security implications and provide timely, risk-informed recommendations to the System Owner and program leadership.\nMaintain clear separation of authority: provide guidance and recommendations while preserving final Government decisions, approvals, risk acceptance, and signatures\nEnsure implementation, maintenance, and evidence of management, operational, and technical security controls required by the GII System Security Plan (SSP) and DHS policy.\nMaintain the SSP and supporting authorization documentation so that system boundaries, components, data flows, interfaces, control implementation statements, responsibilities, and evidence reflect the current operating environment.\nCoordinate control implementation and evidence collection for ESRI Portal, ArcGIS Online, AWS-hosted applications and infrastructure, identity and access services, geospatial data services, custom applications, networks, and enterprise integrations.\nIdentify control gaps, weaknesses, dependencies, and inherited-control issues; assign or coordinate remediation ownership and track corrective actions through approved processes.\nSupport annual SSP updates and other security-documentation refreshes required by the DHS authorization and compliance lifecycle.\nExecute the GII Information Security Continuous Monitoring (ISCM) program and provide current visibility into system assets, vulnerabilities, configuration, control effectiveness, and changes in security posture.\nCoordinate and review credentialed/authenticated scans and other automated security-management outputs in accordance with the current ISCM strategy.\nReview, validate, and adjudicate findings from continuous monitoring, vulnerability diagnosis, patching, configuration assessment, and mitigation activities.\nPerform and document monthly ISCM review and adjudication activities, maintain traceable evidence, identify trends and recurring weaknesses, and escalate material risks.\nCoordinate with operations and engineering teams on monthly patching, emergency fixes, vulnerability remediation, and follow-up validation while minimizing mission disruption.\nMaintain dashboards, metrics, findings status, and decision-support reporting needed to demonstrate confidentiality, integrity, availability, and continued authorization\nPrepare, maintain, validate, and organize artifacts supporting assessment, authorization, certification/accreditation, Authority to Operate (ATO), and Authority to Connect (ATC) activities.\nCoordinate evidence requests, control assessments, security testing, authorization reviews, and remediation activities with assessors, technical teams, program personnel, and DHS stakeholders.\nMaintain an authorization-ready posture by ensuring artifacts are accurate, current, internally consistent, traceable, and aligned with the operational environment.\nRespond to DHS cybersecurity investigations, data calls, and requests for information concerning the GII security posture.\nSupport compliance reporting and corrective actions arising from security assessments, audits, vulnerability reviews, and Government direction.\nZh8TI6ZfAx","datePosted":"2026-08-08T14:03:31.928Z","dateModified":"2026-08-08T14:03:31.928Z","hiringOrganization":{"@type":"Organization","name":"Cfocus Software","sameAs":"https://jobsearcher.com"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Remote","addressRegion":"OR","addressCountry":"US"}},"identifier":{"@type":"PropertyValue","name":"JobSearcher","value":"7e131b2ba1e55fcbc997ea2f"},"url":"https://jobsearcher.com/jobs/7e131b2ba1e55fcbc997ea2f"}}