> Markdown version of [/jobs/ext/2709101-information-systems-security-officer](https://www.wearedevelopers.com/jobs/ext/2709101-information-systems-security-officer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Information Systems Security Officer

- **Company:** Spear AI
- **Location:** Washington, United States (Remote available)
- **Experience:** Expert
- **Contract:** Temporary contract
- **Skills:** Artificial Intelligence, Amazon Web Services, Microsoft Azure, Cyber Security, Information Systems, Identity and Access Management, Software Vulnerability Management, Data Management
- **Published:** September 4, 2026
- **Apply:** https://startup.jobs/information-systems-security-officer-spear-ai-8782302

## About the Role

* Active TS/SCI required; must be able to obtain a Polygraph.
 * Deep expertise in NIST RMF, ICD 503, CNSSI 1253, and IC/DoW security policy frameworks
 * Demonstrated experience achieving and maintaining ATOs for complex, multi-system programs in classified environments
 * Strong background in security architecture, risk management, and incident response within JWICS or similar classified networks
 * Experience leading and mentoring security teams in a fast-paced, mission-driven environment
 * Professional certifications required: CISSP; CISM, CAP, or CASP+ strongly preferred
 * DoW 8570/8140 IAM Level III compliance required

Nice to have

 * Experience with AI/ML system security considerations
 * AWS GovCloud or Azure Government security experience
 * Military Intelligence or IC experience

## Description

We're a small team wearing many hats, and you'd have a wide variety of responsibilities that include:

 * Serve as the senior security authority for all program information systems, providing oversight to ISSOs and security staff
 * Lead and manage the Risk Management Framework (RMF) process across multiple systems, ensuring ATOs are achieved and maintained in compliance with ICD 503 and NIST standards
 * Develop, implement, and enforce information security policies, procedures, and standards tailored to IC operational environments
 * Advise program leadership and the Authorizing Official (AO) on cybersecurity risks, mitigation strategies, and residual risk acceptance
 * Oversee continuous monitoring programs, security control assessments, and vulnerability management activities
 * Lead incident response, forensic investigations, and after-action reporting for security events affecting classified systems
 * Manage and mentor ISSO personnel, establishing clear responsibilities and security workflows
 * Coordinate with IC and DoW security stakeholders, including IGs, inspectors, and oversight bodies
 * Ensure security architecture and engineering decisions align with mission requirements and applicable directives (ICD 503, CNSSI 1253, NIST SP 800-53)
 * Evaluate emerging threats and drive proactive security improvements across AI/ML and data platforms
 * Support audits, inspections, and reviews by government oversight authorities


## Related Videos

- [Building Sovereign AI: Lessons from Deploying Secure RAG Systems using Confidential Computing](https://www.wearedevelopers.com/videos/100108-building-sovereign-ai-lessons-from-deploying-secure-rag-systems-using-confidential-computing)
- [It's all about the Data](https://www.wearedevelopers.com/videos/425-it-s-all-about-the-data)
- [Developer Tools for Microsoft Azure](https://www.wearedevelopers.com/videos/450-developer-tools-for-microsoft-azure)
- [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats)
- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [The Data Mesh as the end of the Datalake as we know it](https://www.wearedevelopers.com/videos/156-the-data-mesh-as-the-end-of-the-datalake-as-we-know-it)

## Related Articles

- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [Dev Digest 164: AI Agents, AI Blindspots and MCP security problems](https://www.wearedevelopers.com/magazine/578-dev-digest-164-ai-agents-ai-blindspots-and-mcp-security-problems)
- [Stephan Gillich - Bringing AI Everywhere](https://www.wearedevelopers.com/magazine/489-stephan-gillich-bringing-ai-everywhere)
- [Dev Digest 137 - AI'm not sure about this](https://www.wearedevelopers.com/magazine/485-dev-digest-137-ai-m-not-sure-about-this)
- [The Overflow: Security and Privacy](https://www.wearedevelopers.com/magazine/715-the-overflow-security-and-privacy)
- [Dev Digest 138 - Are you secure about this?](https://www.wearedevelopers.com/magazine/486-dev-digest-138-are-you-secure-about-this)