> Markdown version of [/jobs/ext/4417337-information-systems-security-officer](https://www.wearedevelopers.com/jobs/ext/4417337-information-systems-security-officer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Information Systems Security Officer - **Company:** Seneca Holdings - **Location:** Mechanicsburg, PA, United States (Remote available) - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Cloud Computing Security, CompTIA Security+, Cyber Security, Information Systems, Decision Support Systems, Identity and Access Management, Information Security Management, Information Systems Security Architecture Professional, Role-Based Access Control, User Provisioning Software, Information Technology, Tools for Reporting, Plan of Action and Milestones - **Published:** October 15, 2026 - **Apply:** https://jobs.localjobnetwork.com/apply/add/88644009/1 ## About the Role * Demonstrated experience supporting cybersecurity compliance, system security, and Risk Management Framework (RMF) processes. * Strong understanding of DOW cybersecurity policies, standards, and security authorization requirements. * Experience supporting system accreditation and authorization activities within DOW environments. * Knowledge of access control management, identity management, and account review processes. * Experience evaluating and reporting security vulnerabilities affecting DOW information systems and networks. * Strong analytical, organizational, and communication skills. * Ability to work independently and collaboratively in a mission-focused environment. * S. citizenship and ability to obtain and maintain all required government security clearances, as applicable. * One or more of the following certifications: + CompTIA Security+ CE + Certified in Governance, Risk and Compliance (CGRC) + Certified Information Systems Security Professional (CISSP) + Equivalent cybersecurity certification meeting DOW requirements Education & Experience Possess current Secret Clearance plus one of the following: Bachelor's degree in Cybersecurity, Information Assurance, Information Technology, Computer Science, or a related field and a minimum of five (5) years of experience supporting RMF, cybersecurity compliance, information assurance, or system security activities. orMinimum of nine (9) years of directly relevant cybersecurity, RMF, information assurance, or system security experience in lieu of a degree. Technical Skills & Knowledge Risk Management & Compliance * Risk Management Framework (RMF) * Security Authorization and Accreditation * Security Control Assessment and Validation * Continuous Monitoring Programs * Cybersecurity Risk Assessments * Plan of Action & Milestones (POA&M) Management ## Description The Information System Security Officer (ISSO) supports a Department of War (DOW) agency in the contractor environment for cybersecurity and risk management program by ensuring information systems comply with DOW cybersecurity requirements and authorization standards. The ISSO is responsible for supporting Risk Management Framework (RMF) activities, system security authorization efforts, continuous monitoring, access control management, and risk assessments. This position works closely with system owners, cybersecurity teams, and mission stakeholders to maintain the security posture of DSCA systems and ensure compliance with applicable federal and DOW policies., * Support system categorization efforts and conduct cybersecurity risk assessments in accordance with applicable DoW and federal guidance. * Assist with implementation and execution of the Risk Management Framework (RMF) lifecycle for assigned systems. * Support system accreditation and security authorization activities, including preparation and maintenance of authorization documentation. * Ensure compliance with DOW cybersecurity policies, standards, and security controls. * Monitor information systems and support continuous monitoring activities to identify and address security risks. * Evaluate continuous monitoring dashboards and security reporting tools to assess system security posture. * Manage user provisioning, deprovisioning, and periodic access reviews to ensure compliance with least-privilege and access control requirements. * Track, assess, and coordinate remediation of identified security vulnerabilities and compliance deficiencies. * Collaborate with system owners, engineers, cybersecurity personnel, and Authorizing Officials to support secure system operations. * Support security assessments, audits, inspections, and cybersecurity compliance reviews. * Maintain security documentation, plans, and artifacts required for authorization and continuous monitoring activities. * Develop reports, metrics, and status updates related to cybersecurity compliance and risk management activities., DOW Cybersecurity Frameworks & Guidance * Department of War (DOW) Cybersecurity Policies * DOW Cloud Computing Security Requirements Guide (CCSRG) * NIST Special Publication 800-37 * DOW Risk Management Framework Guidance * Security Authorization Processes Identity & Access Management * User Provisioning and Deprovisioning * Role-Based Access Control (RBAC) * Privileged Access Management * Periodic User Access Reviews * Account Compliance Monitoring Cybersecurity Operations * Continuous Monitoring Dashboard Evaluation * Vulnerability Identification and Remediation * Security Compliance Reporting * Security Control Validation * Risk-Based Decision Support * Security Documentation Management