ISSO - Information System Security Officer

About the role

The Information System Security Officer (ISSO) will be responsible for implementing and maintaining security controls, supporting the Risk Management Framework (RMF) process, managing vulnerability remediation efforts, and ensuring systems remain compliant with federal and DoD security standards.

Responsibilities

• Manage and maintain cybersecurity compliance for classified information systems.
• Support the Risk Management Framework (RMF) lifecycle, including system authorization and continuous monitoring activities.
• Develop, maintain, and update security documentation, including System Security Plans (SSPs), POA&Ms, Security Control Assessments, and related artifacts.
• Conduct security reviews, audits, and assessments to ensure compliance with NIST 800-53, DoD directives, and customer requirements.
• Perform vulnerability management activities using tools such as ACAS, SCAP, and STIG Viewer.
• Track, document, and coordinate remediation of identified vulnerabilities and security findings.
• Monitor systems for security compliance and support incident response activities as required.
• Support ongoing Authorization to Operate (ATO) efforts and continuous authorization requirements.

Requirements

• CompTIA Security+ or higher certification.
• Active Top Secret SCI clearance required.
• 100% onsite role.
• Experience supporting Special Access Programs (SAP) or SCI environments.

Desired Skills and Experience

ISSO, ISSM, ISSE, information system security officer, cyber security, SSP, POA&M, ACAS, DFARS, eMASS, vulnerabilities, compliance, NIST, STIGS, DISA, DoD, RMF, risk management, CMMC, audit, TS/SCI, top secret, secret, clearance.