New

ISSO / Security Compliance Analyst

Chameleon Integrated Services
life insurance, 401(k)
United States, D.C., Washington
Jul 23, 2026
We are a growing information technology company that offers its employees a culture of success, the chance to work on revolutionary federal IT infrastructure, and the opportunity to grow alongside cutting-edge technology that is reshaping the industry. We are seeking forward-thinking candidates that have strong experience in operational support and can help take to the next level in a proactive stance. Chameleon Integrated Services has expertise in operations management, quality systems, data operations and cybersecurity.We secure some of the most sensitive data for the Department of Defense and for other U.S. federal government agencies.We are known for the great care we take with clients and employees, and we believe in promoting from within. We offer a Full Benefits package including: Competitive Employee Health Insurance options including dental 100% company paid vision plan 401K plan with generous company match and no vesting period 100% company paid life insurance 100% company paid long and short-term disability insurance Training allowance PTO and more ISSO / Security Compliance Analyst Must be a United States citizen. Must be eligible for a Tier 4 High-Risk Public Trust investigation. Strong preference for a current or recently favorably adjudicated Tier 4 or Tier 5 investigation. Role: Provide system-level ISSO support under the direction of the Lead and Senior ISSOs. Maintain security records, collect and validate evidence, update CSAM records, track POA&Ms, reconcile ServiceNow actions, support access and account reviews, prepare recurring reports, and coordinate with system owners and technical teams. This position carries an assigned system portfolio and is not limited to clerical documentation. The analyst must understand the relationship among system architecture, controls, vulnerabilities, changes, incidents, evidence, and authorization status. Minimum Requirements: At least 4 years of cybersecurity, information assurance, compliance, assessment, or ISSO experience At least 2 years supporting federal systems Working knowledge of: NIST SP 800-37 NIST SP 800-53 SSPs POA&Ms Security-control evidence Continuous monitoring Change-impact analysis Experience using at least one GRC platform: CSAM eMASS Xacta Archer ServiceNow GRC Experience using ServiceNow or another ITSM platform Ability to review evidence for currency, completeness, ownership, and traceability Security+ required or obtainable before start Bachelor's degree preferred but not required Competitive Differentiators: CSAM experience FISMA Moderate systems Tenable, Qualys, or Splunk experience Azure Government or Microsoft 365 GCC/GCC High FedRAMP documentation Audit evidence collection and response Current federal suitability CGRC certification The resume must clearly identify: Systems supported GRC and ITSM tools used Artifacts maintained POA&M responsibilities Evidence collection and validation work Audit or assessment support Security impact analysis or change-control involvement Measurable backlog, timeliness, quality, or closure results "We are an equal opportunity employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, sexual orientation, gender identity, disability or protected veteran status" Texting Privacy Policy Message type: Informational; you will receive text messages regarding your application and potentially regarding interview scheduling. No mobile information will be shared with third parties/affiliates for marketing/promotional purposes. Message frequency will vary depending on the application process.Msg & data rates may apply. OPT out at any time by texting "Stop".