> Markdown version of [/jobs/ext/4334882-information-system-security-officer-isso](https://www.wearedevelopers.com/jobs/ext/4334882-information-system-security-officer-isso). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Information System Security Officer (ISSO)

- **Company:** TEAM Inc.
- **Location:** Washington, DC, United States
- **Experience:** Experienced
- **Salary:** $110,000.0 - $125,000.0
- **Contract:** Permanent contract
- **Skills:** Cyber Security, Information Security Management, Software Vulnerability Management, Information Security Management System, Information Technology
- **Published:** October 18, 2026
- **Apply:** https://www.indeed.com/viewjob?jk=c2c6c5d8614d066e

## About the Role

· 3-5 years Cybersecurity experience

· Working knowledge and experience with CSAM and the NIST RMF, · Solid knowledge of the process to obtain a system ATO and requirements to maintain the ATO

· Experience working with system stakeholders to assess and manage system cybersecurity risk

· Ability to synthesize complex IT system information and communicate system status and requirements in written products and verbal presentations

· Ability to write clear, concise and effective security control implementation statements

· Familiarity with configuration settings and vulnerability management analysis of infrastructure

devices

· Ability to draft a complete ATO package, to include the SSP

· Ability to work independently, and efficiently, with minimal direct supervision, and within given

## Description

o Conduct initial Security Assessment and obtain system Authorization to Operate (ATO), in

line with NIST SP 800-37 Rev. 2.

o Maintain the Security Authorization or ATO of assigned system(s)

o Continuously update all Security Authorization documentation to maintain assigned system's

ATO or system go-live dates.

o Select the baseline security controls for the IT system, using the CSAM Governance, Risk,

and Compliance (GRC) Tool, and tailor controls where appropriate.

o Document all relevant NIST 800-53 Security Controls for assigned IT systems in the System

Security Plan (SSP).

o Perform and document initial and annual risk self-assessments of all systems assigned

o Develop and document all supporting Security A&A artifacts (i.e., PTA, SSP, ITCP, BIA, CMP,

MOU, ISA).

o Produce Security Authorization package for Authorizing Official (AO) signature including

ATO

o Track the deployment of software to the environment that is not part of the base image.

o Conduct security impact analyses of proposed changes, provide recommendations.

o Ability to analyze configuration settings, implementation of STIGs, and conducting manual

checklists.

o Generate and manage Plan of Action & Milestones (POA&Ms), with meaningful milestones,

and clear/concise implementation statements for each non-compliant control for assigned