Junior/Mid-Level Information System Security Officer

About the role

The Information System Security Officer (ISSO), in collaboration with the Information System Security Manager (ISSM), supports the security and compliance of the organization’s classified and high-side information systems while enabling mission-critical operations. This role is ideal for a junior to mid-level cybersecurity professional with foundational knowledge of information assurance, system administration, security compliance, and DoD or DCSA security requirements. The ISSO assists with securing on-premises networks, standalone systems, business applications, and peripherals through hands-on execution of security procedures, continuous monitoring, documentation, and customer support. Responsibilities include supporting Risk Management Framework (RMF) activities and Authorization to Operate (ATO) package development and maintenance through eMASS and associated processes, while partnering with industrial security and technical teams to implement technical, administrative, and operational controls. Success in this role requires a willingness to learn, attention to detail, clear communication, initiative, and the ability to think creatively when balancing security requirements with operational needs. The successful candidate will be highly personable, approachable, and able to independently build relationships with customers, end users, and internal cross-functional teams. Candidates should be self-starters with basic system administration experience or technical aptitude and an interest in growing their cybersecurity and compliance expertise. This is a full-time, on-site position requiring face-to-face collaboration with cross-functional teams and colleagues. Early career candidates with security clearances are highly encouraged to apply!

Responsibilities

• Serve as the ISSO under the direction of the ISSM, overseeing the security compliance and secure operations for the full lifecycle of classified systems in alignment with Defense Counterintelligence and Security Agency (DCSA) and other federal government standards
• Act as an advisor to the Site Facility Security Officer (FSO) and ISSM on all classified information system security matters and maintain liaison with the local DCSA Information Systems Security Professional (ISSP)
• Ensure ongoing compliance with the National Industrial Security Program (NISP), DoD, and DCSA requirements by executing local policies, processes, and procedures in alignment with the DCSA Assessment and Authorization Guide (DAAG)
• Execute steps within RMF, developing and maintaining required security documentation and artifacts, including policies, procedures, training materials, security control implementation, system diagrams, asset inventories, and Plans of Action and Milestones (POA&Ms)
• Maintain and renew ATOs for classified systems, ensuring full alignment with DoD, DCSA, and corporate requirements
• Collaborate with DCSA ISSP and internal stakeholders to resolve assessment findings and strengthen the overall security posture and compliance adherence
• Conduct periodic self-inspections and security assessments of classified systems as part of the facility’s self‑inspection program, ensuring corrective actions are implemented promptly
• Assist in preparing for and supporting internal and external audits by government agencies through updating documentation, validating configurations, preparing physical artifacts, and ensuring NIST security controls remain compliant