Information Systems Security Officer

We’re hiring an Information Systems Security Officer (ISSO) to support mission-critical, classified environments. In this role, you’ll help ensure information systems stay compliant throughout the Risk Management Framework (RMF) lifecycle-supporting ATO packages, continuous monitoring, assessments, and audit readiness. You’ll partner closely with technical teams and security stakeholders to drive secure, compliant system operations.

What You’ll Do (Key Responsibilities)

• Support the full RMF lifecycle for classified information systems
• Build and maintain security authorization packages and RMF documentation
• Coordinate and support Authority to Operate (ATO) efforts
• Perform/control security assessments, compliance reviews, and control validation
• Track vulnerabilities, findings, and remediation activities (POA&Ms, etc.)
• Support Continuous Monitoring (ConMon) and ongoing security activities
• Review scan results/configurations to ensure alignment with security requirements
• Work with system teams to implement/maintain required security controls
• Participate in audits, inspections, and cybersecurity compliance reviews
• Provide risk-based recommendations to improve security posture

• Active TS/SCI with Polygraph
• Experience in ISSO / Information Assurance / cybersecurity compliance in classified environments
• Strong knowledge of RMF and the security authorization process (ATO)
• Familiarity with:
• NIST SP 800-53 (Rev 3 and/or Rev 5)
• NIST SP 800-37
• Experience with compliance/configuration scanning and assessment workflows
• Strong communication skills (written + verbal) and comfort working cross-functionally Tools/Platforms (Experience With)

Experience with RMF/cyber compliance tools such as:

• XACTA
• LATTE / ART
• BISCOTTI
• WATCHCAT
• STE (Experience with similar tools is also valuable.) Documentation You Should Be Comfortable With

Hands-on experience developing/reviewing security documentation such as:

• SSP, POA&M, SAR, RAR
• CMP, CP, BIA
• SPFs / exceptions and related artifacts

• AARs and audit support documentation Preferred / Nice-to-Have

• Prior support of classified government systems
• Experience partnering with ISSMs, System Owners, Security Control Assessors, and Authorizing Officials
• Familiarity with vulnerability remediation and system administration security concepts
• Certifications like Security+, CISSP, CAP, CASP+, or CISM

System One, and its subsidiaries including Joulé, ALTA IT Services, CM Access, TPGS, and MOUNTAIN, LTD., are leaders in delivering workforce solutions and integrated services across North America. We help clients get work done more efficiently and economically, without compromising quality. System One not only serves as a valued partner for our clients, but we offer eligible full-time employees health and welfare benefits coverage options including medical, dental, vision, spending accounts, life insurance, voluntary plans, as well as participation in a 401(k) plan.

System One, and its subsidiaries including Joulé and Mountain Ltd., are leaders in delivering outsourced services and workforce solutions across North America. We help clients get work done more efficiently and economically, without compromising quality. System One not only serves as a valued partner for our clients, but we offer eligible employees health and welfare benefits coverage options including medical, dental, vision, spending accounts, life insurance, voluntary plans, as well as participation in a 401(k) plan.