Information System Security Officer – ISSO

This is a fully remote position, open to applicants in United States.

📋 Description

• Oversee the Security Plans for Systems, including implementation control statements, system inventories, authorization boundaries, network, and data-flow diagrams, along with supporting documentation in eMASS or another customer-approved platform.

• Assist in the categorization of systems, selection of controls, and documentation of both inherited and system-specific controls.

• Create and update authorization packages for initial approvals, reauthorizations, and modifications to the system.

• Manage the collection of evidence, conduct reviews, adhere to assessment timelines, and respond to identified findings.

• Maintain Plans of Action and Milestones (POA&Ms), assign and monitor remediation tasks, and document evidence of validation and closure.

• Analyze vulnerability scans, STIG checklists, and security advisories; coordinate remediation efforts and document any unresolved risks.

• Implement the approved continuous monitoring strategy, which includes control evaluations, scanning schedules, account assessments, audit-log evaluations, configuration checks, and reporting.

• Assess proposed changes in applications, infrastructure, interfaces, and data flows for their security implications.

• Collaborate with cloud, platform, software, and cybersecurity engineers to gather technical evidence.

• Facilitate security assessments, inspections, and audits by organizing evidence and tracking corrective measures.

• Maintain security protocols and assist in access-control reviews, incident reporting, contingency planning, and recovery drills.

• Provide updates on authorization milestones, monitoring outcomes, vulnerabilities, and overdue actions; escalate risk recommendations to the ISSM and government decision-makers.

⛳️ Requirements

• Active Secret security clearance, with the capability to obtain and retain Top Secret if necessary for the role.

• At least five years of pertinent experience as an ISSO, ISSM, cybersecurity compliance specialist, or a comparable role supporting DoD information systems.

• Practical experience in preparing and managing DoD RMF authorization packages, which includes security control documentation, assessment assistance, POA&M management, and ATO sustainability.

• Familiarity with eMASS, Xacta, or a similar government authorization system.

• Knowledge of NIST SP 800-53 security controls, DISA STIGs, vulnerability management, continuous monitoring, and DoD system authorization necessities.

• Proficiency in interpreting vulnerability scan results, technical configurations, system diagrams, and assessment results.

• Understanding of operating systems, networking, identity and access management, encryption, configuration management, and logging.

• Current cybersecurity certification relevant to assigned responsibilities and the capability to meet applicable DoD 8140 work-role and proficiency-level qualification standards.

• Excellent technical writing, documentation, organization, and stakeholder coordination abilities.

• Willingness to support occasional travel and perform classified duties at authorized facilities.

• A college degree is not a prerequisite.

• Candidates must meet the eligibility criteria for a U.S. Government security clearance; only U.S. Citizens qualify for a security clearance.

🏝️ Benefits

• Competitive salary and comprehensive benefits package.

• Opportunities for professional development and continued education.

• Supportive work environment with a focus on collaboration and innovation.