Information Systems Security Officer (FORECASTED)

Columbia Technology Partners; Corridor North (MD); On-site; USD 110,000 - 170,000; Full time

Job summary

Columbia Technology Partners is seeking an Information Systems Security Officer (ISSO) to support the security and compliance posture of information systems across mission-critical environments. The candidate will implement security policies, support RMF activities, and maintain SSPs, risk assessments, and A&A packages.

Level 2/3 responsibilities include leading information assurance activities, serving as ISSM when required, and coordinating with ISSMs, engineers, and government stakeholders to

Qualifications

• Bachelor's degree in CS/Cybersecurity/IT or related discipline.
• 10 years of ISSO experience on programs/contracts of similar scope.
• DoD 8570 IAM Level I or higher required.
• Experience in at least two of: security tools, hardware/software security, protocols, encryption.

Responsibilities

• Implement, coordinate, and enforce information security policies and methodologies.
• Maintain operational security posture and ensure compliance with security requirements.
• Support RMF activities and security authorization processes (A&A).
• Develop and review SSPs, risk assessment reports, and SRTMs.
• Evaluate security solutions for classified processing compliance.
• Assist with vulnerability and risk assessments, and security impact analyses.
• Administer user identification/authentication for systems.
• Maintain configuration management for security-relevant assets.
• Manage changes and security-related records; support ISSM on posture.

Skills

RMF familiarity

DoD 8570 IAM

Security policies

Vulnerability assessment

ISSO/ISSM experience

Documentation (SSP, A&A)

Stakeholder collaboration

Encryption techniques

Education

Bachelor's degree in Computer Science or related field

Tools

RMF tooling

Job description

This Position is Contingent on Contract Award

Description

Columbia Technology Partners is seeking an Information Systems Security Officer (ISSO) to support the security and compliance posture of information systems, programs, and enclaves across mission‑critical environments. The ideal candidate will assist with the implementation and enforcement of information security policies, support Risk Management Framework (RMF) activities, maintain operational security compliance, and ensure systems adhere to established security requirements. This role provides opportunities to support or lead security operations, authorization activities, configuration management, and information assurance initiatives while working closely with Information System Security Managers (ISSMs), engineers, administrators, and government stakeholders.

Key Responsibilities – ISSO Level 2

• Implement, coordinate, and enforce information systems security policies, standards, and methodologies.
• Maintain the operational security posture of information systems and ensure compliance with applicable security requirements.
• Support security authorization activities in accordance with NIST Risk Management Framework (RMF) requirements.
• Develop, maintain, and review security documentation, including System Security Plans (SSPs), Risk Assessment Reports, Certification & Accreditation (C&A) packages, and System Requirements Traceability Matrices (SRTMs).
• Evaluate security solutions to ensure compliance with requirements for processing classified information.
• Assist with vulnerability assessments, risk assessments, and security impact analyses.
• Administer user identification and authentication mechanisms for assigned systems.
• Maintain configuration management for security‑relevant hardware, software, and firmware.
• Manage and assess system changes to determine security impacts.
• Maintain records for information systems and security‑related assets, including upgrades and modifications.
• Support the ISSM in maintaining the appropriate information assurance posture for systems, programs, and enclaves.
• Perform day‑to‑day security operations and assist with the management of security aspects of assigned systems.

Additional Responsibilities – ISSO Level 3

In addition to the responsibilities above, ISSO 3 candidates will:

• Lead information assurance activities for assigned programs, systems, or enclaves.
• Serve as an Information System Security Manager (ISSM) when required.
• Provide daily oversight, guidance, and direction to contractor ISSOs.
• Serve as the Approval Authority for information systems under their control.
• Lead the planning, coordination, and implementation of security programs and policies.
• Interact directly with customers, IT staff, program leadership, and senior executives to define and achieve Information Assurance objectives.
• Oversee certification and accreditation efforts for assigned systems.
• Provide strategic guidance on system security posture, compliance, and risk management activities.
• Ensure security requirements are incorporated into operational and organizational objectives.

Qualifications – ISSO Level 2

• Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or a related discipline from an accredited college or university.
• Ten (10) years of experience as an Information Systems Security Officer supporting programs and contracts of similar scope, type, and complexity.
• Four (4) additional years of ISSO experience may be substituted in lieu of a bachelor's degree.
• DoD 8570 compliance with Information Assurance Management (IAM) Level I or higher is required.
• Experience in at least two of the following areas:
  • Security tools and technologies
  • Hardware and software security implementation
  • Communication protocols
  • Encryption techniques and technologies

Additional Qualifications – ISSO Level 3

• Fifteen (15) years of experience as an Information Systems Security Officer supporting programs and contracts of similar scope, type, and complexity.
• Experience in at least three of the following areas:
  • Security tools and technologies
  • Hardware and software security implementation
  • Communication protocols
  • Encryption techniques and technologies

Preferred Qualifications

• Experience supporting NIST RMF, security authorization, continuous monitoring, and compliance initiatives.
• Experience developing and maintaining SSPs, C&A packages, risk assessments, and related security documentation.
• Experience supporting classified environments and implementing security controls for government information systems.
• Knowledge of vulnerability management, configuration management, and security impact analysis processes.
• Experience working closely with ISSMs, system administrators, engineers, and government stakeholders in secure mission environments.

Requirements

• U.S. Citizenship is required for all applicants. CTP is an equal opportunity employer and abides by applicable employment laws and regulations. All applicants and employees are subject to random drug testing in accordance with Executive Order 12564. Employment is contingent upon successful completion of a security background investigation and polygraph.
• Certification requirements:
  • DOD 8570 IAM Level I
• This position requires an active Security Clearance with appropriate Polygraph.

Equal Opportunity Statement

Columbia Technology Partners is an Equal Opportunity Employer. We consider applicants without regard to race, color, religion, age, national origin, ancestry, ethnicity, gender, gender identity, gender expression, sexual orientation, marital status, veteran status, disability, genetic information, citizenship status, or membership in any other group protected by federal, state, or local law. Our EEO policy reflects our commitment to ensure equality and promote diversity and inclusion in the workplace. Our policy applies to all employees, job candidates, contractors, stakeholders, partners, and visitors.