173039

About the role

Zachary Piper Solutions is seeking an Information System Security Officer (ISSO) to support the Office of the Under Secretary of War in Alexandria, VA. The role leads Risk Management Lifecycle efforts for Controlled Unclassified Information in classified environments within the Acquisition & Sustainment branch.

Clearance: Top Secret, SCI eligibility. Location: Alexandria, VA (Hybrid – 1x/week onsite). Posting opens: 8/27/2026. Applications accepted for at least 30 days from posting date.

Responsibilities

• Serve as the lead cybersecurity advisor, overseeing Assessment & Authorization (A&A), Continuous Monitoring (ConMon), governance, and risk management activities.
• Partner with Program Managers, ISOs, engineers, SCAs, AOs, and government leadership to integrate cybersecurity across the system lifecycle.
• Lead all phases of the DoD Risk Management Framework (RMF), including categorization, control implementation, assessment, authorization, and continuous monitoring.
• Develop and maintain RMF artifacts, including SSPs, POA&Ms, assessment documentation, ConMon records, and supporting evidence.
• Coordinate A&A activities supporting ATOs, IATTs, ATO‑Cs, and system reauthorizations.
• Manage continuous monitoring, vulnerability management, STIG compliance, security controls, and cybersecurity reporting.
• Conduct risk assessments and provide recommendations to support Authorizing Official (AO) decisions.
• Coordinate Security Control Assessments (SCAs), validate corrective actions, and track remediation efforts.
• Review system architectures, authorization boundaries, and system changes to ensure ongoing compliance.
• Prepare executive briefings, authorization recommendations, and cybersecurity status reports.
• Support Zero Trust, cloud security, DevSecOps, reciprocity, inherited controls, and enterprise cybersecurity initiatives.

Qualifications

• Bachelor’s degree and 8+ years of experience supporting cybersecurity programs conducting A&A activities.
• Active Top Secret w/ SCI eligibility.
• Certifications: IAT III (CISSP, CISM, CASP+, CCSP, etc.).
• Experience managing multiple RMF authorization packages.
• Experience briefing government leadership and preparing documentation.
• Experience implementing Zero Trust architecture and cloud security.

Pay

Total compensation based on experience level – $130,000‑$150,000+.

Benefits

• Paid time off (PTO)
• Holidays
• 401(k)
• Medical, dental, vision coverage
• Certification reimbursement
• Hybrid work environment
• Contract stability and mobility through Zachary Piper Solutions

Schedule

Hybrid – 1 day per week onsite in Alexandria, VA.