Information System Security Officer

Isallc; Fort Washington (MD); On-site; USD 178,000 - 210,000; Full time

Job summary

Intelligence and Security Associates (ISA) is seeking an Information System Security Officer (ISSO) to oversee security governance and RMF lifecycles across DoD/National security programs in Fort Washington, MD. The role ensures ATO readiness, develops SSPs, and interfaces with government personnel to sustain accreditation.

The ISSO will lead vulnerability assessments, monitor POA&M resolutions, and implement STIGs, while coordinating with ISSMs, SCAs, and AOs.

Qualifications

• Minimum of 20 years of information systems security experience.
• Minimum of 8 years RMF experience in defense/national security environments.
• Minimum of 5 years in ISSO/ISSM/SCA/authorization-support roles.
• Experience drafting and maintaining SSPs, POA&Ms, SCTMs, and risk assessments.
• Strong communication with Government Accreditation personnel and leadership.

Responsibilities

• Manage RMF lifecycle to achieve and sustain ATOs.
• Draft and maintain SSPs, SCTMs, POA&Ms, and Continuous Monitoring Plans.
• Interface with Government Accreditation personnel and ISOs to fulfill requests.
• Evaluate controls against NIST SP 800-53/800-37 and STIG requirements.
• Conduct vulnerability scans, audits, and risk assessments.
• Coordinate security incident response and root-cause analyses.
• Develop SOPs and user security awareness training.

Skills

RMF lifecycle

eMASS

SSP drafting

SCTM

POA&M

NIST SP 800-53

NIST SP 800-37

STIGs

AO coordination

Education

Bachelor's degree in Cybersecurity/IT/CS

Tools

eMASS

Job description

# Information System Security OfficerHot JobFort Washington - Fort Washington, MD 20744; Headquarters - Arlington, VA 22206-2284## OverviewSalary Range$178,000.00 - $210,000.00 Salary/yearPosition TypeFull Time## Description**COMPANY OVERVIEW:** The Intelligence and Security Associates (ISA) is a Virginia-based SBA certified Service-Disabled Veteran-Owned Small Business. ISA is a proud V3-certified employer, with one in two ISA employees having served in the U.S. military. Additionally, ISA holds a General Services Administration (GSA) Multiple Award Schedule (MAS) contract, and One Acquisition Solution for Integrated Services + (OASIS+) Total Small Business Pool Contract Vehicle.Originally founded as an education and training company, ISA continues a 20-plus-year tradition of providing value creation for our clients, delivering unique solutions tailored to their specific challenges across a broad range of national security issues and competencies.Our highly qualified subject matter professionals, data and technical experts, and our seasoned senior leaders specialize in national security and intelligence delivery services for the Department of War (DoW), the Intelligence Community (IC), and other federal and commercial entities. Our extensive Program of Work includes broad areas of Mission Engineering & Systems Integration, Strategic Advantage & Warfighter Support, and Operational Enablers to federal government and commercial entities across the defense and national security sectors.**JOB DESCRIPTION:** The Information System Security Officer (ISSO) is a critical cybersecurity role responsible for ensuring that defense and national security information systems maintain robust security postures and achieve formal Authorization to Operate (ATO). Operating within federal government program environments, the ISSO manages end-to-end Risk Management Framework (RMF) lifecycles, authors security controls documentation, and maintains system artifacts within the Enterprise Mission Assurance Support Service (eMASS). The ISSO serves as the primary technical liaison to Government Accreditation personnel, supporting the Information System Security Manager (ISSM), Security Control Assessor (SCA), and Authorizing Official (AO) requests to maintain audit readiness and continuous monitoring.**WORK MODEL:** Our people-first culture prioritizes the benefits of flexibility and collaboration. Consistent with government and industry standards that support a more fulsome return to in-office culture, ISA supports our clients and provides a working environment that promotes professional development opportunities through peer engagement and face-to-face mentoring. The ability to meet across teams at the office and cross-pollinate information is critical to our success.**RESPONSIBILITIES:** The ISSO provides full lifecycle security governance, continuous monitoring, and accreditation package maintenance across assigned systems. They are directly responsible for achieving and maintaining all cybersecurity accreditation packages, system security plans, and compliance documentation. Working closely with system administrators, software engineers, project leads, and government authorities, the ISSO conducts vulnerability analyses, tracks remediation efforts, enforces baseline security controls, and ensures uninterrupted system authorization compliance.**DUTIES:** • Manages the day-to-day execution of the Risk Management Framework (RMF) process to achieve and sustain system Authorizations to Operate (ATO). • Authors and maintains System Security Plans (SSPs), Security Control Traceability Matrices (SCTMs), Plans of Action and Milestones (POA&Ms), Continuous Monitoring Plans, and System Environment Descriptions in eMASS. • Interfaces directly with Government Accreditation personnel, ISSMs, Security Control Assessors (SCAs), and Authorizing Officials (AOs) to fulfill accreditation and audit requests. • Evaluates technical, operational, and management security controls against NIST SP 800-53, NIST SP 800-37, and DoI/DoW cybersecurity directives. • Conducts regular system vulnerability scans, security audits, and risk assessments to evaluate system baselines and identify emerging security risks. • Monitors POA&M resolution efforts, coordinating with system administrators and technical leads to remediate security findings in a timely manner. • Processes system change requests, performing security impact analyses prior to software, hardware, or structural modifications. • Coordinates security incident response, threat reporting, and root-cause analyses in accordance with government protocols and organizational policies. • Develops standard operating procedures (SOPs), user security awareness training, and role-based security rules for authorized system end-users. • Ensures assigned systems maintain strict compliance with federal security baselines, Security Technical Information Guide (STIG) requirements, and agency-specific directives. • Reinforces ISA’s corporate culture and mission-focused delivery approach.**OTHER DUTIES:** Duties, responsibilities, and activities can change at any time based on position requirements. These changes will be communicated by your supervisor.**SUPERVISOR RESPONSIBILITIES:** None. This is an individual contributor role reporting to the Information System Security Manager (ISSM), Technical Director, or Program Manager.## Qualifications**CLEARANCE REQUIRED:** As a condition of employment, ISA employees must be able to obtain and maintain a favorably adjudicated Top Secret (TS) investigation with Sensitive Compartmented Information (SCI) eligibility consistent with requirements set forth in U.S. law, federal regulation and executive order. Applicants must be able to submit documentation establishing U.S. Person status upon hiring. All ISA employees are required to uphold and maintain trustworthiness and suitability requirements of the U.S. federal government.**EXPERIENCE REQUIRED:** • Minimum of 20 years of overall information systems security experience.* Minimum of 8 years of relevant cybersecurity and Risk Management Framework (RMF) experience in defense or national security environments.• Minimum of 5 years of direct experience serving in an ISSO, ISSM, Security Control Assessor (SCA), or equivalent authorization-support role. • Demonstrated proficiency utilizing the Enterprise Mission Assurance Support Service (eMASS) system to build, manage, and maintain formal accreditation packages. • Proven track record of communicating directly with Government Accreditation personnel and successfully fulfilling ISSM, SCA, and AO requirements. • Hands-on experience drafting, reviewing, and updating System Security Plans (SSPs), POA&Ms, Risk Assessments, and Security Control Traceability Matrices (SCTMs). • In-depth practical knowledge of NIST SP 800-53, NIST SP 800-37, Security Technical Implementation Guides (STIGs), and DoD/DoW cybersecurity instruction (DoDI 8510.01). • Strong written and verbal communication skills with the capability to explain complex technical security concepts to non-technical program leadership.**EDUCATION:** Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, Systems Engineering, or a related technical field required (Master’s degree preferred).**CERTIFICATION:** • The ISSO shall possess and maintain a current DoW / DoD 8140 (formerly 8570) foundational qualification appropriate to the assigned cybersecurity work role and proficiency level, as required by the Government (e.g., IAM Level II/III baseline credentials such as CISSP, CISM, CGRC/CAP, or GSLC). • The contractor must meet any additional Component, command, or program-specific qualification requirements. • As DoW 8140 requirements and qualification matrices are subject to update, contractor personnel must remain appropriately qualified throughout performance.