Information System Security Officer (ISSO)

Everforth, Inc.; Merrifield (VA); Hybrid; USD 110,000 - 150,000; Full time

Job summary

Everforth ECS in Fairfax, VA is seeking an experienced Information System Security Officer (ISSO) to lead RMF documentation and authorization activities for DoD information systems. The role focuses on control documentation, SSPs, assessment preparation, and coordinating artifacts with engineering teams and government stakeholders.

The ideal candidate has a strong background in RMF processes, NIST SP 800-37 Rev. 2, and 800-53 Rev.

Qualifications

• Active DoD Secret clearance required.
• 5+ years supporting DoD or Federal cybersecurity programs.
• Experience supporting RMF authorizations using NIST SP 800-37 Rev. 2.
• Experience documenting RMF artifacts and SSPs.
• Cybersecurity certification meeting DoD 8140 requirements.

Responsibilities

• Maintain authoritative security control inventory and boundary documentation.
• Develop, review, and maintain SSP implementation statements.
• Coordinate security control documentation across stakeholders.
• Analyze inherited security controls and identify gaps.
• Coordinate collection of artifacts and evidence.
• Maintain evidence repositories and version control.
• Support governance documentation, policies, and procedures.
• Coordinate package reviews and assessment responses.
• Track control implementation status and escalate risks.
• Support continuous monitoring activities and updates.

Skills

Active DoD clearance

RMF documentation

Technical writing

Stakeholder coordination

NIST SP 800-37 Rev. 2

Education

Bachelor's degree in Cybersecurity, Information Systems, Computer Science

Tools

eMASS

Job description

Information System Security Officer (ISSO)

#5243

Job Description

Everforth ECS is seeking an Information System Security Office (ISSO) – Control Documentation & RMF to work in our Fairfax, VA office in a hybrid onsite/remote capacity.

Everforth ECS is seeking an experienced Information System Security Officer (ISSO) to support the development, documentation, and execution of the Risk Management Framework (RMF) authorization process for complex Department of Defense information systems. This individual will focus on security control documentation, control inheritance, assessment preparation, and coordination of authorization artifacts while working closely with engineering teams, common control providers, and government stakeholders.

This position requires a detail-oriented cybersecurity professional with strong technical writing skills and experience managing RMF documentation throughout the system authorization lifecycle.

Responsibilities:

• Maintain the authoritative security control inventory and associated authorization boundary documentation.
• Develop, review, and maintain System Security Plan (SSP) implementation statements.
• Coordinate security control implementation documentation across multiple technical and organizational stakeholders.
• Analyze and document inherited security controls, validating applicability and identifying implementation gaps.
• Coordinate collection of common control documentation, assessment artifacts, and supporting authorization evidence.
• Maintain evidence repositories, document version control, implementation status, and deficiency tracking.
• Support development of governance documentation, policies, procedures, and operational security documentation.
• Coordinate package reviews, assessment support activities, responses to assessor requests, and authorization package submissions.
• Track implementation status of security controls and elevate unresolved risks or documentation gaps.
• Support continuous monitoring activities and documentation updates following authorization.
• Other duties, as assigned.

Note: Salary iscommensuratewithskillset, qualifications, experience, and educational background.

Salary 110,000-150,000

Required Skills

• Active DoD Secret security clearance
• Bachelor's degree in Cybersecurity, Information Systems, Computer Science, or related discipline (or equivalent experience).
• 5+ years supporting DoD or Federal cybersecurity programs.
• Demonstrated experience supporting RMF authorizations using NIST SP 800-37 Rev. 2.
• Experience developing and maintaining RMF documentation, including System Security Plans (SSPs).
• Experience with NIST SP 800-53 Rev. 5 security controls and NIST SP 800-53A assessment procedures.
• Experience documenting inherited controls and coordinating with Common Control Providers.
• Strong technical writing, document management, and organizational skills.
• Ability to coordinate with technical teams, government customers, and assessors.
• Cybersecurity certification meeting DoD 8140 Cyber Workforce Qualification requirements.
• Strong problem-solving and decision-making capabilities, with a proven ability to weigh the relative costs and benefits of potential actions and identify the most appropriate solution.
• Highly developed interpersonal and oral/written communication skills, with the ability to effectively and professionally interact with a diverse set of stakeholders (from peers to end-users to executive management).

Desired Skills

• Experience supporting complex cloud or hybrid DoD environments.
• Experience with enterprise authorization repositories (eMASS or equivalent).
• Experience supporting continuous monitoring programs.
• Familiarity with Zero Trust Architecture and cloud security principles.
• Sec+ or a related cybersecurity certification

#EverforthECS1

ECS Federal LLC is an equal opportunity employer and does not discriminate or allow discrimination on the basis any characteristic protected by law. All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran or any other status protected by applicable federal, state, or local jurisdiction law.

Everforth ECS is the federal segment of Everforth , a $4B global organization with over 10,000 employees. Our nearly 3,500 professionals deliver advanced technology solutions in data and AI, cybersecurity, and enterprise transformation, serving defense, intelligence, and federal civilian agencies.

Our work powers mission-critical outcomes, strengthens technology partnerships, and creates meaningful opportunities for our people. We are defined by a commitment to excellence in delivery, a culture of innovation, and an environment where talent can thrive and grow.

We value:

• Attracting and developing top talent and high-performing teams
• Fostering a culture that is engaging, accountable, and mission-driven

Meet the challenge. Make a difference with Everforth ECS!

undefined

ECS Federal LLC is an equal opportunity employer and does not discriminate or allow discrimination on the basis any characteristic protected by law. All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran or any other status protected by applicable federal, state, or local jurisdiction law.

Everforth ECS is the federal segment of Everforth , a $4B global organization with over 10,000 employees. Our nearly 3,500 professionals deliver advanced technology solutions in data and AI, cybersecurity, and enterprise transformation, serving defense, intelligence, and federal civilian agencies.

Our work powers mission-critical outcomes, strengthens technology partnerships, and creates meaningful opportunities for our people. We are defined by a commitment to excellence in delivery, a culture of innovation, and an environment where talent can thrive and grow.

Meet the challenge. Make a difference with Everforth ECS!