> Markdown version of [/jobs/ext/4609217-senior-information-systems-security-officer-clearance-required](https://www.wearedevelopers.com/jobs/ext/4609217-senior-information-systems-security-officer-clearance-required). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Senior Information Systems Security Officer (Clearance Required) - **Company:** Kroll Inc - **Location:** Washington, DC, United States - **Experience:** Expert - **Salary:** $100,000 - $150,000 - **Contract:** Permanent contract - **Skills:** Configuration Management, Cyber Security, Computer Networks, Internet Security, Systems Development Life Cycle, Security Content Automation Protocol, Vulnerability Analysis - **Published:** November 6, 2026 - **Apply:** https://www.careerbuilder.com/job-details/senior-information-systems-security-officer-clearance-required-washington-dc--f84ac908-f03a-45d4-82ac-f2d94d8091b7 ## About the Role Computer Security, Security Clearance, Full Scope Polygraph, Top Secret Clearance, Industry Standards, Internet Security, Risk Management, System Lifecycle, Regulatory Compliance, Federal Compliance Regulations ## Description * Clearance Required: Top Secret/SCI with Active Full Scope Polygraph (no Conditional Clearance Access/CCA status allowed) Kroll is seeking a highly experienced Senior ISSO-S. The ISSO-S is responsible for leading the development, implementation, and oversight of cybersecurity policies and procedures for complex, classified systems. This role ensures compliance with federal regulations and industry standards, manages risk, and supports the system lifecycle from design through decommissioning. * Security Governance & Compliance + Develop, implement, and maintain security policies, procedures, and protocols. + Ensure compliance with NIST SP 800-53, RMF, FISMA, JSIG, DAAPM, and other applicable frameworks. + Lead efforts to achieve and maintain Authority to Operate (ATO). * Risk Management & Assessment + Conduct risk assessments and vulnerability scans using tools like ACAS, SCAP, and STIGs. + Manage POA&Ms and ensure timely mitigation of identified vulnerabilities. + Oversee configuration management and change control processes. * System Lifecycle Support + Integrate security requirements into the System Development Lifecycle (SDLC). + Maintain and update System Security Plans (SSPs) and other authorization documentation. + Register and manage systems in eMASS or equivalent platforms. * Incident Response & Monitoring + Coordinate cybersecurity incident response and reporting. + Monitor system logs and network traffic for anomalies. + Investigate security breaches and recommend corrective actions. * Collaboration & Leadership + Serve as a key advisor to system owners and stakeholders. + Collaborate with ISSMs, ISSEs, PMs, and AOs to ensure security posture is maintained. + Provide security awareness training and guidance to users.