Information Systems Security Officer (ISSO)

Position would require the candidate to be a W2 employee of Donatech. US Citizenship Required. Active Secret Clearance Required.

Responsibilities

• Prepare systems for inspections, audits, and assessments by ensuring documentation, controls, and processes are compliant and inspection-ready.
• Review and approve data transfers and user access requests within assigned scope, ensuring adherence to security policies, authorization boundaries, and contractual requirements.
• Conduct advanced system auditing and log analysis to identify trends, recurring issues, and potential security risks, and recommend mitigations to the ISSM.
• Develop, validate, and maintain cybersecurity documentation, authorization artifacts, and compliance reports to ensure systems remain audit-ready.
• Manage and track Plans of Action and Milestones (POA&Ms) within ISSO responsibility, ensuring timely remediation of findings from inspections, audits, or continuous monitoring.
• Participate in Change Control Boards (CCBs), reviewing proposed system changes for security impact, authorization implications, and risk considerations.
• Collaborate with cross-functional teams (IT, Facilities, Industrial Security) and enterprise cybersecurity stakeholders to ensure consistent application of ISSO responsibilities across technical and operational environments.
• Monitor system metrics, vulnerability trends, and continuous monitoring data to support risk reporting and operational decision-making.
• Communicate system security posture, inspection readiness, and ISSO-level findings to the ISSM and other senior cybersecurity personnel.

Qualifications

• Active DoD Secret Security Clearance required on day one.
• IAM Level I certification compliant with DoD 8570 / DoD 8140
• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or a related field, or equivalent relevant experience.
• Experience performing cybersecurity monitoring, detection, auditing, and continuous monitoring activities in an enterprise or DoD environment.
• Working knowledge of cybersecurity principles, including network security, system logging, access management, and incident detection.
• Experience analyzing security alerts, logs, and network traffic to identify anomalous or malicious activity and escalate appropriately.
• Ability to document findings, audit results, and response actions in accordance with established procedures.
• Familiarity with cybersecurity tools such as SIEMs (Splunk preferred), IDS/IPS, endpoint protection, vulnerability scanning, and network monitoring platforms.
• Experience participating in Change Control Boards (CCBs) and reviewing proposed system changes for security impact and risk.
• Ability to collaborate with cross-functional teams to support secure operations and maintain audit-ready systems.
• Familiarity with DoD or other regulated environments, including RMF, JSIG, NIST, NISPOM, and DAAG guidance.

Preferred Qualifications

• Advanced experience using SIEM platforms such as Splunk for log analysis, alert triage, event correlation, and reporting.
• Working knowledge of enterprise network protocols, architectures, and advanced attack techniques.
• Experience supporting inspection and assessment readiness, including trend analysis of security events and POA&M tracking.
• Exposure to vulnerability management processes and tools, including evaluation of findings and mitigation tracking.
• Ability to analyze system metrics, identify trends, and communicate risk and mitigation strategies to senior analysts or leadership.
• Experience coordinating with IT, Facilities, and Industrial Security teams to ensure consistent application of cybersecurity controls.