Provides cybersecurity, risk management, compliance, continuous monitoring, and authorization support for FEMA information systems and cloud environments. Maintains RMF artifacts, security controls, vulnerability findings, POA&Ms, and audit-ready documentation. Coordinates remediation with technical teams, reviews security impacts of system changes, supports incident response and assessments, and ensures compliance with DHS/FEMA requirements, FISMA, FedRAMP, and NIST guidance.
About SHR Consulting Group
SHR is a premier technology integrator solving our nation’s most complex modernization and readiness challenges across the defense, federal civilian, and intelligence markets. Our robust portfolio of offerings includes high-end solutions in systems engineering and integration, enterprise IT, including cloud services: cyber, software, advanced analytics, and AI. With an intimate understanding of our customers’ challenges and deep expertise in existing and emerging technologies, we integrate the best components from our own portfolio and our partner ecosystem to deliver innovative, effective, and efficient solutions.
Position Summary
SHR Consulting Group is seeking a Cybersecurity Analyst / Information System Security Officer (ISSO) to provide cybersecurity, risk management, compliance, and continuous monitoring support for Federal Emergency Management Agency (FEMA) information systems and cloud environments. The ISSO works with FEMA system owners, Information System Security Managers (ISSMs), technical teams, and cybersecurity stakeholders to maintain system security posture and compliance with DHS/FEMA cybersecurity requirements, FISMA, and the NIST Risk Management Framework (RMF).Key Responsibilities
- Support implementation and ongoing execution of the NIST Risk Management Framework (RMF) and DHS/FEMA security policies and procedures.
- Develop, maintain, and update system security documentation, including System Security Plans (SSPs), Security Assessment Reports (SARs), Plans of Action and Milestones (POA&Ms), Contingency Plans, Configuration Management Plans, and related authorization artifacts.
- Support Assessment and Authorization (A&A) activities for FEMA systems, applications, and cloud environments.
- Maintain security documentation and evidence within applicable DHS/FEMA governance, risk, and compliance (GRC) systems.
- Conduct and document security control assessments and support implementation and validation of NIST SP 800-53 security and privacy controls.
- Track cybersecurity findings, vulnerabilities, POA&Ms, remediation activities, and risk acceptance through closure.
- Review vulnerability scanning and security monitoring results from tools such as Tenable/Nessus, CrowdStrike, Elastic, and other DHS/FEMA-approved security platforms.
- Coordinate with system administrators, cloud engineers, DevSecOps teams, application teams, and system owners to remediate vulnerabilities and configuration deficiencies.
- Support continuous monitoring, including recurring security control reviews, vulnerability management, configuration compliance, and required reporting.
- Review proposed system and infrastructure changes to identify cybersecurity impacts and ensure security requirements are incorporated throughout the system lifecycle.
- Support compliance with applicable DHS security directives, FEMA policies, FISMA, FedRAMP, NIST guidance, and federal cybersecurity requirements.
- Assist with incident response activities, security investigations, audit requests, and cybersecurity reporting as required.
- Participate in security reviews, technical meetings, change management activities, and coordination with FEMA cybersecurity stakeholders.
- Identify cybersecurity risks and provide practical recommendations for mitigation, remediation, or risk management.
- Maintain audit-ready security documentation and supporting evidence.
Minimum Qualifications
- 5+ years of cybersecurity or information assurance experience, preferably supporting federal government environments.
- Demonstrated experience supporting RMF, A&A, security control implementation, continuous monitoring, vulnerability management, and POA&M management.
- Working knowledge of NIST SP 800-53, NIST SP 800-37, FISMA, FedRAMP, and federal cybersecurity requirements.
- Experience developing and maintaining cybersecurity authorization and compliance documentation.
- Familiarity with enterprise and cloud environments, including AWS and/or Microsoft Azure.
- Strong written and verbal communication skills with the ability to work effectively with technical and non-technical stakeholders.
Preferred Qualifications
- Previous experience supporting FEMA, DHS, or another federal civilian agency.
- Experience securing AWS GovCloud and/or Azure Government environments.
- Experience with vulnerability management, SIEM, endpoint security, and continuous monitoring technologies.
- Experience working with Agile and DevSecOps engineering teams.
- Familiarity with Zero Trust architecture and federal cloud security requirements.
- One or more relevant certifications, such as CISSP, CAP/CGRC, Security+, CISM, CCSP, or equivalent cybersecurity certification.
- Strong attention to detail and ability to maintain accurate, audit-ready security documentation.
- Ability to manage multiple systems, security requirements, findings, and deadlines simultaneously.
- Proactive approach to identifying and resolving cybersecurity risks.
- Ability to translate federal cybersecurity requirements into actionable requirements for engineering and operations teams.
- Strong collaboration skills and ability to work across cybersecurity, engineering, program management, and Government stakeholder organizations.
Education & Certifications
- Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Information Systems, or a related discipline; relevant experience may be considered in lieu of a degree.
Security Clearance
- U.S. Citizenship.
- Ability to obtain and maintain required DHS/FEMA suitability and security clearance/access requirements. Priority will be given to FEMA Public Trust Clearance or DHS Public Trust within the last 3 years, or to active/current Public Trust.
Work Environment
- Remote.
- Candidates residing in the DC Metro Area preferred.
Benefits
- Competitive salary commensurate with experience and clearance level
- Comprehensive medical, dental, and vision coverage
- 401(k) with company contribution
- Paid time off and eleven federal holidays
- Certification reimbursement and training support (DoD 8140 baseline and computing environment certifications)
- Life and disability insurance
Salary Range 115,000 – 145,000 USD. The salary range represents a general guideline; SHR considers a number of factors when determining the base salary offers such as the scope and responsibilities of the position, and the candidate's experience, education, skills and current market conditions.
SHR Consulting Group, LLC is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or protected veteran status
Similar Jobs
HR Tech • Information Technology • Professional Services • Sales • Software
Manage, develop, and lead an outbound SMB sales team while achieving regional quotas and quarterly targets. Drive prospecting, qualification, full-cycle sales, pipeline generation, forecasting, and closing. Build customer and industry relationships, engage HR decision-makers, develop partnerships, and provide market and competitive insights to cross-functional teams. The role requires Salesforce pipeline management and leadership in a fast-paced SaaS environment.
Top Skills:
HrisSaaSSalesforce
Cloud • Security • Software • Cybersecurity • Automation
Leads enterprise sales across the Southeastern United States, managing Strategic Account Executives and owning regional bookings, revenue, forecasts, territory strategy, and pipeline health. Responsibilities include hiring, coaching, performance management, customer relationship development, go-to-market execution, sales enablement, and cross-functional collaboration with Renewals, Marketing, and Sales Operations. The role is fully remote and supports adoption of GitLab’s AI-powered DevSecOps platform.
Top Skills:
AIClariCRMDevsecopsMarketoSaaSSalesforce
Events • Food • Travel • Hospitality • Hotels & Resorts
Direct hotel property operations, including building systems, safety, compliance, maintenance, energy conservation, capital improvements, budgeting, inventory, guest service, and team development. Manage inspections, preventive maintenance, contractor bidding, licensing, permitting, and property rehabilitation while ensuring regulatory and hospitality standards are met.
Top Skills:
Electrical SystemsEnergy Management SystemsHvacLife Safety SystemsMechanical Systems
What you need to know about the Chicago Tech Scene
With vibrant neighborhoods, great food and more affordable housing than either coast, Chicago might be the most liveable major tech hub. It is the birthplace of modern commodities and futures trading, a national hub for logistics and commerce, and home to the American Medical Association and the American Bar Association. This diverse blend of industry influences has helped Chicago emerge as a major player in verticals like fintech, biotechnology, legal tech, e-commerce and logistics technology. It’s also a major hiring center for tech companies on both coasts.
Key Facts About Chicago Tech
- Number of Tech Workers: 245,800; 5.2% of overall workforce (2024 CompTIA survey)
- Major Tech Employers: McDonald’s, John Deere, Boeing, Morningstar
- Key Industries: Artificial intelligence, biotechnology, fintech, software, logistics technology
- Funding Landscape: $2.5 billion in venture capital funding in 2024 (Pitchbook)
- Notable Investors: Pritzker Group Venture Capital, Arch Venture Partners, MATH Venture Partners, Jump Capital, Hyde Park Venture Partners
- Research Centers and Universities: Northwestern University, University of Chicago, University of Illinois Urbana-Champaign, Illinois Institute of Technology, Argonne National Laboratory, Fermi National Accelerator Laboratory
