Information Systems Security Officer (ISSO) Mid/Sr

VSS is looking for a dedicated and knowledgeable Information Systems Security Officer (ISSO) - Mid to Senior level to oversee and enhance our organization’s cybersecurity posture. This role involves ensuring compliance with information security standards, managing IT risk, and leading security initiatives across cloud infrastructure and enterprise systems. The ideal candidate must have hands on experience understanding and applying Assessment & Authorization (A&A) activities, including development and maintenance of the System Security Plan (SSP), Security Assessment Plan (SAP), reviewing and interpreting Security Assessment Report (SAR), Plan of Action and Milestones (POA&M), and Authorization Packages. Understanding Lab environments is a plus. Must posses strong leadership and communication skills with a comprehensive understanding of eMASS. This position offers an opportunity to play a critical role in safeguarding sensitive information and maintaining the integrity of the IT environment.

Responsibilities

• Ensure ongoing information security compliance across organizational systems and processes.
• Manage IT risk assessments and develop mitigation strategies to address vulnerabilities to include continuous review of system scans (i.e., ACAS, Nessus, STIGs/ SRGs in association with information security controls and organizational assets).
• May lead security teams in implementing best practices for cybersecurity and incident response.
• Maintain and oversee A&A process.
• Conduct comprehensive security assessments to identify gaps and recommend improvements.
• Assist in securing and maintaining security of cloud environments, ensuring secure configurations and operations.
• Utilize GRC software tools to monitor, document, and report on security governance, risks, and compliance activities.
• Develop, implement, and enforce security policies aligned with organizational objectives and regulatory requirements.
• Collaborate with cross-functional teams to promote security awareness and ensure consistent application of security controls.
• Manage and document POA&Ms across the information system.

Must have Active Secret clearance or above, No exceptions. Clean record. Active Level III certification (CISM, CISSP, GSLC, etc.)., * Proven experience in information security compliance, risk management, and governance.

• Strong leadership abilities with experience managing security teams or projects.
• Deep understanding of the RMF.
• Hands on experience and practical application implementing security controls adhering to NIST 800-53 Rev. 5.
• Expertise in conducting security assessments and vulnerability testing.
• Ability to read and communicate audit findings, audit log output and STIGs.
• Experience securing Gov cloud infrastructure applying security best practices across platforms like AWS, Azure, or Google Cloud.
• Proficiency using eMASS.
• Excellent analytical skills with the ability to assess complex systems for potential threats or weaknesses.
• Effective communication skills to articulate security strategies to technical teams and stakeholders.

This role is essential for maintaining successful system authorizations and supporting continuous improvement in cybersecurity practices. Ideal candidate should have experience supporting the DoD.

You will enjoy working with VSS.

Pay: $130,000.00 - $180,000.00 per year

Education:

• Bachelor’s (Required)

Experience:

• hands on: 10 years (Required)

Language:

• English (Preferred)

License/Certification:

• IAT or IAM Level 3 cert (Required)