Information System Security Officer

AT&T

Confirmed live today High trust

Quick summary

Work type
On-site
Location
Chantilly, VA
Salary
$143,800–$215,800 / yr
Posted
7 days ago
Freshness
Confirmed live today
Closes
Nov 20, 2026

Market check

Salary context

Above market

How this pay compares to similar roles

Similar $153k
This role $180k
$105k $228k
below market most similar roles pay here above market

This role pays more than 72% of similar roles. Most pay $122,275–$184,325 — the blue band above. At the midpoint, this role pays about $180k versus about $153k for comparable roles.

Based on 240 similar postings.

Employer

About AT&T

AT&T is a US-based telecommunications company providing wireless, broadband, and fiber internet service along with phone and connectivity products for consumers and businesses.

AT&T currently has 91 open roles on FindRole.

Listed pay typically runs $98,100–$196,000 across 81 roles with salary data.

Most-posted roles

View all roles at AT&T

At a glance

TL;DR · Information System Security Officer

The Information System Security Officer (Government) joins the Integrity, Compliance & Risk Management Team to provide technical leadership for the Federal Aviation Administration - Enterprise Network Services program. This role involves translating FISMA, NIST Risk Management Framework, FEDRAMP, and CMMC requirements into scalable security practices. You will lead NIST RMF lifecycle activities, including system categorization, control tailoring, and authorization to operate. Daily tasks include developing authorization packages, overseeing security assessments, and managing POA&M governance. You will utilize Xacta, ServiceNow, and Tenable Security Center to monitor vulnerabilities and automate evidence collection. Key responsibilities include performing security architecture reviews across cloud and network domains, applying Zero Trust principles, and integrating security governance into infrastructure-as-code pipelines to ensure defensible compliance and reduce operational risk for public sector clients.

What you'll do

  • Lead NIST RMF lifecycle activities including system categorization, control selection, assessment, and authorization using the Xacta platform.
  • Translate federal mandates like FISMA and FEDRAMP into actionable security control plans and technical standards.
  • Develop and quality-assure authorization packages including system security plans, risk assessments, and privacy artifacts.
  • Oversee security control assessments to identify implementation deficiencies and verify corrective actions.
  • Manage POA&M governance to prioritize and track the remediation of vulnerabilities and control deficiencies.
  • Establish continuous-compliance practices using automated evidence, security baselines, and Tenable Security Center data.
  • Perform security architecture reviews across identity, network, cloud, and data domains to identify control gaps.
  • Communicate security posture and residual risk to executive stakeholders using metrics derived from Xacta and ServiceNow.

What we're looking for

  • Must possess a Bachelor’s degree.
  • Must have an active CISSP certification.
  • Must have a Public Trust security clearance.
  • CSM or Sec+ certification (preferred).
  • Advanced proficiency with Xacta 360 or comparable GRC platforms (preferred).
  • Hands-on experience with Tenable Security Center and enterprise vulnerability management (preferred).
  • Working knowledge of the ServiceNow ecosystem, including GRC and vulnerability management (preferred).
  • Experience with FEDRAMP and CMMC Certification Process and certified cloud service deployment (preferred).

More like this

Similar roles

Information Systems Security Officer ISSO2

AT&T

Columbia, MD 31 days ago $98,100–$175,600
Risk Management Framework RMF DoD 8570 IAM Level I Information Assurance Configuration Management Encryption Communication Protocols System Security Plans POA&M CONOPS Security Operations Classified Systems ODNI DoD Policies
10+ yrs exp

Information System Security Officer, Mid-Level

AT&T

Chantilly, VA 82 days ago $98,100–$115,000
RMF ATO Information Assurance Security Audit Cybersecurity Security+ CE CySA+ CCNA Security GICSP GSEC CND SSCP Data Transfer Security Control Assessment
4+ yrs exp

Information System Security Engineer

AT&T

Chantilly, VA 7 days ago $158,200–$237,400
Tenable Security Center Xacta 360 ServiceNow NIST RMF FISMA Active Directory Splunk CyberArk SailPoint Infoblox Cisco SD-WAN NetFlow IPsec Windows Server Nutanix Identity and Access Management Vulnerability Management FEDRAMP CMMC

Information System Security Officer

Booz Allen Hamilton

El Segundo, CA 86 days ago
RMF NIST SP 800-53 DoD 5200.01 ICDs CNSSI 1253 JSIG DAAG Security+ CE CISSP Incident Response Continuous Monitoring Audit Software Security Configuration Control Board TS/SCI
3+ yrs exp

Information System Security Officer

Leidos

Springfield, VA 68 days ago $107,900–$195,050
Risk Management Framework (RMF) FISMA ICD-503 Security+ Security Engineering Assessment & Authorization (A&A) Authority to Operate (ATO) Authority to Connect (ATC) Interim Authorization to Test (IATT) Body of Evidence (BOE) Information Assurance Cyber Operations Data Correlation Security Accreditation
8+ yrs exp

Information System Security Officer

Booz Allen Hamilton

McLean, VA 30 days ago
RMF GRC NIST FISMA Incident Response Data Loss Prevention Vulnerability Scanning Patch Management Security Controls DoD 8570 CISSP CISSP-ISSAP CISSP-ISSEP Configuration Management System Assessment