> Markdown version of [/jobs/ext/3546203-information-systems-security-office-isso](https://www.wearedevelopers.com/jobs/ext/3546203-information-systems-security-office-isso). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Information Systems Security Office (ISSO) - **Company:** J. R. C. Company - **Location:** Washington, DC, United States - **Experience:** Experienced - **Contract:** Permanent contract - **Skills:** CompTIA Security+, Cyber Security, Information Technology - **Published:** September 30, 2026 - **Apply:** https://www.clearancejobs.com/jobs/9202592/information-systems-security-office-isso ## About the Role * Clearance: An active DoD Top Secret Security Clearance with eligibility for an SCI * Education: Bachelor's degree in computer science, Cybersecurity, or related field (or equivalent experience) * Required Certification: CompTIA Security+, * Strong understanding of cybersecurity principles, including confidentiality, integrity, and availability * Ability to convey complex information clearly, concisely, and accurately in both technical and non-technical contexts * Experience: * 7+ years of experience developing Risk Management Framework (RMF) packages * Proven track record of developing effective cybersecurity programs and strategies using approval authority guidance. * Extensive knowledge of security control selection, evaluation, implementation, assessment, and authorization submittal * Experience working in a fast-paced, dynamic environment where requirements can change mid-process and rework is required under a compressed timeframe * Experience with Approval Authority modified RMF process Bonus Points for... * Master's Degree in related field * CISM, CISSP, or other relevant certifications * Active DoD TOP SECRET security clearance * Experience with Department of the Navy physical security requirements and procedures ## Description * Spearhead the development, implementation, and management of the Authority to Operate (ATO) per customer guidance. * Ensure compliance with customer specific cybersecurity requirements, policies, and procedures. * Partner with cross-functional teams to ensure all aspects of the customers' Risk Management Framework (RMF) are effectively implemented. * Track the ATO package through its lifecycle and update for continued ATO as the system is updated or modified. * Conduct risk assessments and manage the overall cybersecurity risk posture. * Manually track the artifacts created in support of the ATO lifecycle. * Liaise with external stakeholders and regulatory bodies.