> Markdown version of [/jobs/ext/2297882-senior-information-system-security-officer-isso](https://www.wearedevelopers.com/jobs/ext/2297882-senior-information-system-security-officer-isso). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Senior Information System Security Officer (ISSO) - **Company:** COMMAND CONTROL COMMUNICATIONS ENGINEERING & LOGISTICS LLC - **Location:** Washington, DC, United States - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Microsoft Windows, Microsoft Azure, Cloud Computing Security, CompTIA Security+, Cyber Security, Federal Information Processing Standards (FIPS), Information Security Management, Cloud Services, Security Information and Event Management, Privacy Controls, SARS Software Products, Okta, Information Technology - **Published:** August 29, 2026 - **Apply:** https://www.clearancejobs.com/jobs/9128140/senior-information-system-security-officer-isso ## About the Role * U.S. Citizenship. * Eligibility to obtain a Tier 4 High-Risk Public Trust. * Minimum seven (7) years of cybersecurity. * Minimum five (5) years in federal RMF, A&A, ISSO, or authorization work. * Working knowledge of NIST SP 800-37, 800-53, 800-53B, FIPS 199, FISMA, and applicable CISA/OMB guidance. * Familiarity with GRC, ITSM, SIEM, scanner, identity, endpoint and cloud-security platforms. * Hands-on CSAM experience supporting system profiles, controls, evidence, POA&Ms, and authorization workflows. * Experience with Azure Government, Microsoft 365 GCC/GCC High, and cloud shared-responsibility models. * Experience with Entra ID, Okta, privileged access, role assignments, and access recertification. Preferred Qualifications: * At least one current cybersecurity certification such as CISSP, CGRC, CISM, CRISC, Security+, SecurityX, CCSP, or GIAC. Education: * Associate's degree in Cybersecurity, Information Technology, or related field. (Relevant experience may be considered in lieu of formal education.) ## Description C3EL is seeking a Senior Information System Security Officer (ISSO) to provide on-site cybersecurity and Risk Management Framework (RMF) sustainment support in Washington, D.C., for a new contract. This role will serve as the primary Alternate Lead, with deep CSAM, RMF, authorization, FedRAMP, cloud, identity, and assessment expertise, being capable of assuming Lead ISSO duties without service degradation for the program. Responsibilities will include, but not be limited to: * Provide on-site cybersecurity and RMF sustainment support. * Independently manage categorization, control selection, implementation evidence, assessment readiness, authorization, and monitoring. * Develop and maintain SSPs, SAPs, SARs, POA&Ms, risk assessments, control statements, inheritance records, and evidence packages. * Support FedRAMP-authorized cloud services, provider artifacts, customer responsibilities, CRMs, SRMs, and inherited controls. * Support privacy controls, PTAs, PIAs, and systems processing PII. * Pre-stage evidence and coordinate SCA interviews, walkthroughs, demonstrations, findings, and comment adjudication. * Track ATO dates, conditions, milestones, open risks, and briefing materials for AO/AODR decisions. * Produce accurate, concise, and audit-ready Government cybersecurity documentation. * Support team coverage from 7:00 a.m. to 6:00 p.m. ET (M-F) and participate in after-hours incident coverage as needed. ## Related Videos - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [Leverage Cloud Computing Benefits with Serverless Multi-Cloud ML ](https://www.wearedevelopers.com/videos/78-leverage-cloud-computing-benefits-with-serverless-multi-cloud-ml) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [One Pipeline, Three Regulator - SBOM Compliance for the Developer](https://www.wearedevelopers.com/videos/100169-one-pipeline-three-regulator-sbom-compliance-for-the-developer) - [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large) - [ZEISS & Microsoft - Building the Next Generation Medical Ecosystem in the Cloud](https://www.wearedevelopers.com/videos/424-zeiss-microsoft-building-the-next-generation-medical-ecosystem-in-the-cloud) ## Related Articles - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology) - [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again)