> Markdown version of [/jobs/ext/4658267-information-system-security-officer-isso-iii](https://www.wearedevelopers.com/jobs/ext/4658267-information-system-security-officer-isso-iii). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Information System Security Officer (ISSO) III

- **Company:** Amatriot Group, LLC
- **Location:** Lincoln, MA, United States
- **Experience:** Experienced
- **Salary:** $132,000 - $144,000
- **Contract:** Permanent contract
- **Skills:** Configuration Management, Cyber Security, Information Systems, Data Security, Firmware, Information Security Management, SAP ERP, SAP (Applications), Information Technology
- **Published:** November 10, 2026
- **Apply:** https://www.careerbuilder.com/job-details/information-system-security-officer-isso-iii-hanscom-air-force-base-ma--e9f5696a-61a2-4c8c-a9c9-64852937e7f5

## About the Role

Computer Security, Security Clearance, Top Secret Clearance, Sensitive Compartmented Information (SCI), Computer Security, ISO (International Organization for Standardization), Incident Response, Operations Security (OPSEC), Information/Data Security (InfoSec), System Operations, * Bachelor's degree or 4 additional years of experience in lieu of a degree. [Required], * 5-7 years of related experience, especially in developing RMF packages or bodies of evidence. [Required]

 * Prior performance in roles such as System/Network Administrator or ISSO. [Required]
 * 2+ years of SAP experience. [Required], * TS/SCI clearance. [Required]
 * Willingness to obtain a CI Poly. [Required]

## Description

The Information System Security Officer (ISSO) III maintains the operational security posture of information systems in close collaboration with the ISSM and ISO. Responsibilities include day-to-day system security operations, physical and environmental protection, personnel security, incident handling, and security training and awareness.

The role supports Special Access Programs (SAPs) for Department of Defense (DoD) agencies, including HQ Air Force, the Office of the Secretary of Defense (OSD), and Military Compartments efforts. Based at Hanscom AFB, MA, under a 5-year Air Force contract, the position provides day-to-day support for Collateral, Sensitive Compartmented Information (SCI), and SAP activities., Security Operations and Coordination

 * Assist the ISSM in fulfilling security duties and responsibilities.
 * Perform ISSO duties for in-house and external customers.
 * Coordinate with the ISSM and ISO to monitor information systems and their operating environments.
 * Ensure approved procedures are in place for clearing, sanitizing, and destroying hardware and media.
 * Monitor system recovery processes to ensure security features and procedures are restored and functioning correctly.
 * Attend required technical and security training relevant to assigned duties, including operating systems, networking, and security management.

Authorization and Security Documentation

 * Prepare, review, and update authorization packages.
 * Keep information system security documentation current and accessible to properly authorized individuals.
 * Conduct periodic information system reviews to ensure compliance with security authorization packages.
 * Assist DoD, National Agency, and contractor organizations with assessment and authorization (A&A) efforts.
 * Prepare reports on the status of security safeguards applied to computer systems.

Configuration and Change Management

 * Implement configuration management across authorization boundaries.
 * Assess the security impact of changes and provide recommendations to the ISSM.
 * Notify the ISSM of changes that may affect information system authorization determinations.
 * Coordinate hardware, software, and firmware changes with the ISSM and AO/DAO before implementation.

Continuous Monitoring and Security Assessments

 * Conduct continuous monitoring for authorization boundaries under the ISSO's purview.
 * Ensure audit records are collected, reviewed, and documented, including anomalies.
 * Execute the cybersecurity portion of self-inspections, including security coordination and review of all system assessment plans.
 * Identify cybersecurity vulnerabilities and assist in implementing countermeasures.