Information System Security Officer (ISSO), Junior

Duties And Responsibilities

• Aid in day-to-day cybersecurity operations for assigned information systems.
• Support the implementation of the NIST Risk Management Framework (RMF).
• Develop and maintain System Security Plans (SSPs), Security Assessment Reports (SARs), Plans of Action and Milestones (POA&Ms), and supporting authorization documentation.
• Maintain security controls to ensure continued compliance with NIST SP 800-53.
• Participate in continuous monitoring activities and vulnerability management.
• Review security scan results from tools such as ACAS, Nessus, or Tenable and assist with remediation tracking.
• Support annual security control assessments and Authority to Operate (ATO) activities.
• Collaborate with system administrators, network engineers, and application owners to implement security controls.
• Aid in security incident reporting, documentation, and corrective actions.
• Maintain audit evidence supporting Federal Information Security Management Act (FISMA) compliance.
• Ensure user access reviews are completed and privileged accounts are monitored.
• Affirm security configuration management reviews and evaluate security impacts of system changes.
• Aid in security awareness activities and policy compliance.

Requirements

• 1–3 years of cybersecurity or information assurance experience.
• Basic understanding of: NIST RMF, NIST SP 800-53, FISMA, Security Authorization (ATO), Continuous Monitoring, Vulnerability Management.
• Experience working with Windows Server and Active Directory environments.
• Strong written communication skills for developing RMF documentation.
• Ability to obtain and maintain a Public Trust or higher security clearance.

Qualifications

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or related field (or equivalent experience).

Skills

• CompTIA Security+
• CAPS
• CPSS

Benefits

• Not specified

Pay

• Not specified

Schedule

• Not specified

About the role

The Junior Information System Security Officer (ISSO) supports the Information System Security Manager (ISSM) in maintaining the security posture of Department of Labor information systems. This role involves assisting with cybersecurity operations, implementing RMF, and ensuring compliance with federal cybersecurity requirements.