ISSO

Key Responsibilities

• Serve as the ISSM for multiple DoD information systems supporting OUSW(A&S) mission requirements.
• Lead all phases of the DoD Risk Management Framework (RMF), including system categorization, control implementation, assessment, authorization, and continuous monitoring.
• Develop and maintain RMF authorization packages, including System Security Plans (SSPs), Security Assessment documentation, Plans of Action & Milestones (POA&Ms), Continuous Monitoring artifacts, and supporting Body of Evidence (BoE).
• Coordinate Assessment & Authorization (A&A) activities supporting Authorization to Operate (ATO), Interim Authorization to Test (IATT), Authorization to Operate with Conditions (ATO-C), and system reauthorization.
• Manage Continuous Monitoring (ConMon), vulnerability management, STIG compliance, security control implementation, and cybersecurity reporting.
• Conduct cybersecurity risk assessments and provide recommendations supporting Authorizing Official (AO) risk decisions. Coordinate Security Control Assessments (SCAs), validate remediation activities, and ensure timely closure of assessment findings.
• Review system architectures, authorization boundaries, data flows, and proposed changes to maintain cybersecurity compliance.
• Provide cybersecurity guidance to Government leadership, Program Managers, engineers, ISSOs, ISSEs, and system administrators.
• Prepare executive briefings, authorization recommendations, and cybersecurity status reports for senior Government leadership.
• Support implementation of Zero Trust Architecture (ZTA), cloud security, DevSecOps, reciprocity, inherited controls, and enterprise cybersecurity governance initiatives.

Requirements

• Active Top Secret Clearance
• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Engineering, or related field (or equivalent experience)
• Minimum 5 years supporting DoD RMF and Assessment & Authorization activities
• Experience managing multiple RMF authorization packages and briefing senior Government leadership
• Excellent analytical, written, verbal, and presentation skills
• Candidates should meet applicable DoD 8140 Cyber Workforce Qualification Program requirements
• Preferred certifications include: Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), CompTIA CASP+, Certified Cloud Security Professional (CCSP)

Pay

Salary Range: $130,000 – $150,000 (depending on experience)

Full Benefits: Medical, Dental, Vision, 401K, PTO, Sick Leave if Required by Law

Application Information

This job opens for applications on August 26, 2026. Applications for this job will be accepted for at least 30 days from the posting date.