Information Systems Security Officer (ISSO)

Trace Systems Inc.; Riyadh; On-site; SAR 200,000 - 320,000; Full time

Job summary

Trace Systems is seeking an experienced Information Systems Security Officer (ISSO) to support the USMTM CITS contract in Riyadh, Saudi Arabia. The ISSO will manage cybersecurity posture, authorization, continuous monitoring, vulnerability management, incident response, and compliance for mission-critical systems.

The role requires active DoD-style credentials, a US Secret clearance, and relocation to Riyadh.

Qualifications

• Active US Government issued Secret clearance.
• US Citizenship is required due to contract requirements.
• Meet DoD 8140 qualification requirements for the assigned work role (541 - Vulnerability Assessment Analyst).
• Bachelor’s degree in Cybersecurity, Information Technology, Information Systems, Computer Science or related fields; military cyber training may qualify.

Responsibilities

• Support RMF processes and authorization packages for DoD systems.
• Develop and maintain System Security Plans and authorization artifacts.
• Assist with ATO sustainment, POA&Ms, continuous monitoring and risk assessments.
• Prepare Security Assessment Reports, risk assessments and MOCC documentation.
• Coordinate with IAM, ISSM, authorizing officials, assessors and service providers.
• Monitor vulnerabilities and coordinate remediation with technical teams.
• Review logs, scan results, bulletins, and directives; ensure corrective actions.

Skills

Vulnerability assessment

Risk management

Security policy compliance

Technical writing

Stakeholder coordination

Education

Bachelor's degree (Cybersecurity / IT / IS)

Tools

eMASS

ACAS

SCAP Checker

Vulnerability scanners

Log management tools

Job description

Job Overview

Job Title: Information Systems Security Officer (ISSO)

Job Location: Al Nakhla, Saudi Arabia

Job Responsibilities

Trace Systems is seeking an experienced Information Systems Security Officer (ISSO) to support the USMTM CITS contract in Riyadh, Kingdom of Saudi Arabia. The ISSO supports cybersecurity posture, authorization, continuous monitoring, vulnerability management, incident response, security-control implementation, audit readiness, and compliance for mission-critical classified and unclassified systems.

• Support implementation and sustainment of the Department of Defense Risk Management Framework for assigned systems and network enclaves.
• Develop, review, and maintain System Security Plans, control implementation statements, system descriptions, contingency and incident response plans, and authorization artifacts.
• Support initial and recurring authorization activities required to obtain and maintain Authority to Operate status.
• Maintain Plans of Action and Milestones, track remediation, validate closure evidence, and coordinate disposition of cybersecurity findings.
• Prepare Security Assessment Reports, risk assessments, control-assessment evidence, and continuous-monitoring documentation.
• Coordinate with Government IAM, ISSM, authorizing officials, assessors, cybersecurity service providers, and higher-level organizations.
• Perform security-impact analyses and provide cybersecurity recommendations through Configuration Control Board processes.
• Monitor security posture using approved vulnerability, compliance, endpoint-security, logging, and scanning tools.
• Review scan results, security bulletins, IAVAs, directives, and notifications; prioritize and coordinate remediation with technical teams.
• Verify implementation of STIGs, security baselines, patches, mitigations, logging, access controls, and corrective actions.
• Support incident triage, reporting, investigation, containment, eradication, recovery, notifications, and after-action activities.
• Review system, application, audit, and security logs for anomalies, unauthorized activity, or indicators of compromise.
• Support account management, privileged access, PKI, token, password, identity lifecycle, certificates, and SIPR credential processes when authorized.
• Support security testing, inspections, audits, assessments, metrics, briefings, awareness, role-based training, and continuity documentation.
• Provide cybersecurity guidance that balances compliance, mission availability, operational risk, and technical requirements.
• Participate in maintenance, emergency response, after-hours support, and on-call activities when cybersecurity events require.

Minimum Qualifications

• Active, in-scope US Government issued Secret clearance.
• Due to the nature of the work and contract requirements: US Citizenship is required.
• Candidates must meet the applicable DoD 8140 qualification requirements for the assigned work role. DoD 8140 Work Role(s): 541 - Vulnerability Assessment Analyst, Proficiency Level: Intermediate; and may qualify through education, military training, certifications, or a combination thereof.
• Qualifying 8140 credentials include a bachelor’s degree in Cybersecurity, Information Technology, Information Systems, Computer Science, Data Science, Software Engineering or completion of relevant military cyber, information assurance, communications, or network security training.
• Qualifying 8140 certifications may include Security+, CEH(P), RCCE Level 1, Cloud+, CPTE, FITSP-A, GCED, GCIH, GCSA, GICSP, GSEC, PenTest+, or other DoD 8140-approved certifications applicable to the Vulnerability Assessment Analyst work role. Higher proficiency-level or equivalent DoD 8140-approved certifications applicable to the assigned work role may also be accepted.
• Eight (8) or more years of progressively responsible cybersecurity, information assurance, assessment and authorization, or related security experience.
• Demonstrated experience supporting DoD RMF, authorization packages, ATO sustainment, POA&Ms, continuous monitoring, and control assessments.
• Experience with vulnerability scanning, risk assessment, security-impact analysis, incident response, remediation tracking, DISA STIGs, and security baselines.
• Experience supporting classified information systems or secure Government environments.
• Working knowledge of NIST security controls, DoD cybersecurity policy, and federal information-security requirements.
• Strong analytical, technical writing, documentation, briefing, and stakeholder-coordination skills.
• Ability to relocate to Riyadh, Kingdom of Saudi Arabia.

Desired Qualification

• Previous experience as an ISSO, ISSM, security control assessor, cybersecurity analyst, or information assurance lead on a DoD program.
• Experience supporting Army, CENTCOM, USARCENT, NETCOM, DISA, RCC-SWA, or other enterprise cybersecurity organizations.
• Experience with eMASS, ACAS, SCAP Compliance Checker, endpoint-security platforms, log-management tools, and Government vulnerability-management technologies.
• Experience supporting Windows Server, Active Directory, VMware, networks, SharePoint, voice, and endpoint environments.
• Experience with NIST SP 800-53, cybersecurity inspections, authorization reviews, and overseas or military mission support.

Trace Systems

Trace Systems, headquartered in Vienna, Virginia, was founded to support and defend our nation's security interests at home and abroad-- whenever and wherever. We provide cybersecurity, intelligence, communications, networking and information technology services, systems, and solutions to the United States Department of Defense, Intelligence Community and Department of Homeland Security.

Trace Systems is an Equal Opportunity and Affiliation Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, gender identity, national origin, age, protected veteran status, or disability status.