Information Systems Security Officer (ISSO)

The ISSO will work with technical teams and government stakeholders to maintain security documentation, assess compliance, track security risks, and support the ongoing authorization and secure operation of assigned systems. This position requires working hybrid onsite at Fort Meade, Maryland, and an active Secret clearance., * Maintain system security documentation, including security plans, security control implementation descriptions, supporting evidence, and operating procedures.

• Support Risk Management Framework (RMF) activities, security assessments, and system authorization efforts.
• Coordinate with system administrators and engineers to assess security controls and address vulnerabilities, configuration weaknesses, and assessment findings.
• Develop and maintain Plans of Action and Milestones (POA&Ms), tracking remediation activities through completion.
• Review vulnerability scan results and Security Technical Implementation Guide (STIG) assessments to identify compliance gaps and support corrective actions.
• Support continuous monitoring activities and report system security status, outstanding risks, and remediation progress to appropriate stakeholders.
• Review proposed system changes for security impacts and coordinate updates to security documentation and control evidence.
• Support security requirements for CSP sustainment and CA development activities, including assessment of changes to PKI-related systems.
• Assist with security incident reporting and response coordination in accordance with established procedures.
• Participate in security reviews, audits, and meetings with government personnel and technical teams.

• Eight years of relevant experience in information systems security, cybersecurity compliance, or related work.
• Bachelor’s degree in cybersecurity, information technology, computer science, or a related field.
• Active Secret security clearance.
• Current certification satisfying the position’s IAT Level II requirement.
• Experience supporting RMF activities and maintaining security documentation for federal or DoW information systems.
• Working knowledge of security controls, vulnerability management, continuous monitoring, and remediation tracking.
• Familiarity with DISA STIGs and the review of system security assessment results.
• Ability to communicate security requirements and findings clearly to technical teams and government stakeholders.
• Ability to work onsite at Fort Meade, Maryland.