Information Systems Security Officer ( ISSO )

Venesco,-LLC-; Maryland; On-site; USD 90,000 - 130,000; Full time

Job summary

Venesco, LLC is seeking an Information System Security Officer (ISSO) to support the day-to-day cybersecurity posture of assigned information systems. This role maintains RMF documentation, supports continuous monitoring, tracks vulnerabilities, manages POA&Ms, and helps ensure systems comply with DoD and NIST requirements.

Location is onsite 3-5 days a week. Responsibilities include updating SSP, supporting monitoring activities, creating POA&Ms, analyzing vulnerability scans, maintaining

Qualifications

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or related field preferred.
• Typically, 2–4 years of cybersecurity or information assurance experience.
• Active Secret clearance.
• Relevant DoD 8140 certifications strongly preferred.
• Working knowledge of NIST SP 800-53 and DoD cybersecurity processes.
• Experience with SSPs, POA&Ms, vulnerability management, and audit evidence collection.
• Familiarity with eMASS, ACAS/Tenable, STIG Viewer, and related tools.
• Strong documentation, analytical, and issue-tracking skills.
• Ability to work with technical and non-technical stakeholders.

Responsibilities

• Maintain and update the System Security Plan (SSP) and RMF artifacts.
• Support continuous monitoring activities, including log review and control checks.
• Create, update, and track POA&Ms for weaknesses and remediation actions.
• Analyze vulnerability scan results and validate DISA STIG findings.
• Maintain system records in eMASS and support package updates.
• Coordinate incident response activities for assigned systems.
• Collaborate with system owners, admins, and engineers to resolve security issues.

Skills

Documentation

Analytical skills

Issue tracking

Stakeholder communication

Education

Bachelor’s degree in Cybersecurity/IT/CS

Tools

eMASS

ACAS/Tenable

STIG Viewer

Job description

Description

Information Systems Security Officer (ISSO)

Position Description:

We are seeking an Information System Security Officer (ISSO) to support the day-to-day cybersecurity posture of assigned information systems. This role is responsible for maintaining RMF documentation, supporting continuous monitoring, tracking vulnerabilities, managing POA&Ms, and helping ensure systems remain compliant with DoD and NIST security requirements. ISSOs are typically the hands-on security practitioners closest to the system and its operational controls.

Location: Onsite 3-5 days a week

Key Responsibilities

• Maintain and update the System Security Plan (SSP) and related RMF artifacts
• Support continuous monitoring activities, including log review, control checks, and security status tracking
• Create, update, and track POA&Ms for identified weaknesses and remediation actions
• Analyze vulnerability scan results and validate DISA STIG compliance findings Support RMF steps including categorization, control implementation, assessment, authorization, and monitoring
• Maintain system records in eMASS and support package updates
• Coordinate incident response activities for assigned systems
• Partner with system owners, admins, engineers, and the ISSM to resolve security issues

Requirements

Required Qualifications

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or related field preferred
• Typically, 2–4 years of cybersecurity or information assurance experience
• Active Secret clearance
• Relevant DoD 8140 certifications such as CISSP strongly preferred
• Working knowledge of NIST SP 800-53, and DoD cybersecurity compliance processes
• Experience with SSPs, POA&Ms, vulnerability management, and audit evidence collection
• Familiarity with eMASS, ACAS/Tenable, STIG Viewer, and related compliance tools
• Strong documentation, analytical, and issue-tracking skills
• Ability to work with technical and non-technical stakeholders

Preferred Qualifications

• Ability to operate in fast-paced, compliance-driven environments
• Strong judgment in evaluating cyber risk and balancing mission needs
• Proven ability to build trust with technical teams and senior leadership
• Detail-oriented approach to documentation, authorization, and continuous monitoring requirements

Venesco, LLC, is an equal opportunity and affirmative action employer. Venesco is committed to administering all employment and personnel actions on the basis of merit and free of discrimination based on race, ethnicity, religious affiliation, gender, gender identity or expression, sexual orientation, national origin, protected veteran status, or status as an individual with a disability. Consistent with this commitment, we are dedicated to the employment and advancement of qualified minorities, women, individuals with disabilities, protected veterans, persons of all ethnic backgrounds and religions according to their abilities.

For more information on Venesco, LLC., visit https://venesco.com.