Information Systems Security Officer (ISSO)

BOAB Ventures is seeking a Information Systems Security Officer (ISSO) to serve as the cybersecurity authority across all information systems supporting a high-visibility Intelligence Community program. You’ll own the security posture across classified environments, including JWICS-based AI platforms, and advise program leadership directly on risk, compliance, and mitigation strategy.

This isn’t checkbox security. You’ll be shaping the policies that determine how the customer manages and protects AI capabilities across the Defense Intelligence Enterprise. If you want your work to have a direct line to warfighter mission success, this is the seat. What You’ll Do

Serve as the senior security authority for all program information systems, providing direct oversight to ISSOs and security staff Own the RMF lifecycle across multiple systems - driving ATOs from initiation through continuous monitoring in compliance with ICD 503 and NIST standards Develop and enforce information security policies, procedures, and standards tailored to IC operational environments Advise program leadership and the Authorizing Official on cybersecurity risk posture, mitigation strategies, and residual risk acceptance decisions Lead continuous monitoring, security control assessments, and vulnerability management across the program Direct incident response, forensic investigations, and after-action reporting for security events on classified systems Manage and mentor ISSO personnel - set clear lanes, build workflows, and develop your team Coordinate with IC and DoD security stakeholders including IGs, inspectors, and oversight bodies Ensure security architecture and engineering decisions align with mission requirements and applicable directives (ICD 503, CNSSI 1253, NIST SP 800-53) Evaluate emerging threats and drive proactive security improvements across AI/ML and data platforms Support audits, inspections, and government oversight reviews

Active TS/SCI clearance; must be able to obtain a Polygraph (prior CI Poly strongly preferred) Deep expertise in NIST RMF, ICD 503, CNSSI 1253, and IC/DoD security policy frameworks Proven track record achieving and maintaining ATOs for complex, multi-system programs in classified environments Strong background in security architecture, risk management, and incident response within JWICS or similar classified networks Experience leading and mentoring security teams in a fast-paced, mission-critical environment CISSP required; CISM, CAP, or CASP+ strongly preferred DoD 8570/8140 IAM Level III compliant, Familiarity with AI/ML security frameworks and challenges in classified deployments AWS GovCloud or Azure Government experience Military Intelligence or IC background