Information System Security Officer – ISSO

Jobtailor; Oklahoma; On-site; USD 120,000 - 160,000; Full time

Job summary

Jobtailor is seeking a seasoned DoD cybersecurity professional to lead the security program for DoD information systems. You will collaborate with the ISSM, maintain RMF accreditation, and ensure compliance with NIST and FISMA standards.

The role requires active TS clearance with SCI eligibility and strong experience in risk and vulnerability assessments. You will coordinate with engineering, IT, and operations to implement robust security controls, perform audits, and report to senior

Qualifications

• Active Top Secret clearance with SCI eligibility.
• Bachelor’s degree required; Master’s degree plus experience accepted.
• Experience with NIST 800-53, RMF, FISMA, JSIG, ICD 503/705, and related DoD frameworks.

Responsibilities

• Collaborate with ISSM to provide cybersecurity guidance and recommendations.
• Develop, implement, and maintain security policies, procedures, and documentation for compliance with DoD standards.
• Oversee security posture of DoD information systems for confidentiality, integrity, and availability.
• Perform risk, vulnerability assessments, and security audits with remediation plans.
• Coordinate with cross-functional teams to implement and enforce security controls and best practices.
• Ensure RMF accreditation processes are completed and maintained.
• Serve as the primary security contact for incident response and reporting to stakeholders.
• Provide security training and awareness for personnel operating DoD systems.
• Maintain security documentation including SSPs, risk assessments, and POA&Ms.
• Stay current with threats and trends to adapt the program.

Skills

Top Secret clearance

DoD policies

Risk assessment

Network security

Documentation/reporting

Cross-functional collaboration

Education

Bachelor’s degree

Master’s degree

DoD 8140 Intermediate cert

Tools

Firewalls

SIEM

IDS/IPS

Vulnerability scanners

Job description

Responsibilities

• Collaborate daily with the ISSM to provide expert cybersecurity guidance and recommendations.
• Support the development, implementation, and maintenance of security policies, procedures, and documentation to ensure compliance with DoD security standards and regulations (e.g., NIST, RMF, FISMA, JSIG).
• Oversee the security posture of DoD information systems, ensuring they meet cybersecurity requirements for confidentiality, integrity, and availability.
• Perform risk assessments, vulnerability assessments, and security audits to identify system vulnerabilities and provide remediation strategies.
• Manage and conduct continuous monitoring of security controls, ensuring the protection of classified and unclassified data.
• Coordinate with cross‑functional teams (engineering, IT, operations) to implement and enforce security protocols and best practices.
• Ensure the accreditation process for DoD systems (e.g., RMF accreditation) is completed and continually maintained in compliance with all applicable requirements.
• Act as the primary point of contact for security‑related issues, assisting in incident response and reporting to senior management and government customers.
• Provide security training and awareness programs for personnel involved in the operation of DoD systems.
• Maintain and track security documentation, including system security plans (SSPs), risk assessments, and Plan of Actions & Milestones (POA&Ms).
• Stay current with emerging cybersecurity threats, vulnerabilities, and trends to ensure the program adapts to evolving security challenges.

Requirements

• US Citizen with at least an active Top Secret security clearance with the ability to obtain a SCI prior to your start date.
• Bachelor’s degree with 8+ years of experience or a Master’s degree with 6+ years of experience.
• In-depth knowledge of DoD cybersecurity policies, frameworks, and compliance standards (e.g., NIST 800-53, RMF, FISMA, ICD 503/705, JSIG, DAAPM).
• Must have a DoD 8140 Intermediate certification (e.g., Cloud+, Security+, etc.).
• Experience with system security engineering, risk management, and vulnerability assessments.
• Strong understanding of network security, security controls, and common cybersecurity tools (e.g., firewalls, IDS/IPS, SIEM, endpoint protection).
• Ability to work independently and collaborate effectively with cross‑functional teams.
• Strong communication skills, including the ability to create and present detailed security reports to stakeholders.
• Interest in continuous learning and professional development in cybersecurity.