Information Systems Security Officer (ISSO)

Canvas; United States; On-site; USD 90,000 - 140,000; Full time

Job summary

Canvas is seeking an experienced information systems security professional to lead and execute a comprehensive security program. You will manage ATO packages, maintain eMASS records, and perform continuous monitoring to ensure secure operations.

The role requires deep knowledge of NIST RMF, DoDI 8510.01, and USAF guidance, with responsibilities including policy enforcement, vulnerability remediation, and incident reporting across contractually required networks.

Responsibilities

• Under general direction, this role carries out all phases of information systems/networks security program that involves access to computers and computerized data enabling company to meet contractual requirements for networkssecurity.
• Conducts regular audits to ensure that systems are being operated securely, and information systems security policies andprocedures are being implemented as defined in security plans.
• Develop, update, and manage Authorization to Operate (ATO) packages. Navigate and maintain system records within the Enterprise Mission Assurance Support Service (eMASS).
• Execute continuous monitoring strategies. Review audit logs, analyze vulnerability scans, and verify system configuration baselines remain intact.
• Implement, enforce, and assessNIST SP 800-53security controls. Apply and verify Defense Information Systems Agency (DISA) Security Technical Implementation Guides (STIGs) and Security Requirements Guides (SRGs).
• Utilize the Assured Compliance Assessment Solution (ACAS) to scan for, identify, and coordinate the remediation of system vulnerabilities.
• Identify, report, and track cybersecurity incidents and data spills in accordance with USAF and DoW incident response directives.
• Draft, review, and maintain System Security Plans (SSP), continuous tracking of Plan of Action and Milestones (POA&M), and system-specific operating procedures.
• Deep understanding of the NIST RMF lifecycle, DoDI 8510.01, and USAF-specific guidance (e.g., AFI 17-101, Risk Management Framework for Air Force Information Technology).

Job description

Essential Duties and Responsibilities

• Under general direction, this role carries out all phases of information systems/networks security program that involves access to computers and computerized data enabling company to meet contractual requirements for networkssecurity.
• Conducts regular audits to ensure that systems are being operated securely, and information systems security policies andprocedures are being implemented as defined in security plans.
• Develop, update, and manage Authorization to Operate (ATO) packages. Navigate and maintain system records within the Enterprise Mission Assurance Support Service (eMASS).
• Execute continuous monitoring strategies. Review audit logs, analyze vulnerability scans, and verify system configuration baselines remain intact.
• Implement, enforce, and assessNIST SP 800-53security controls. Apply and verify Defense Information Systems Agency (DISA) Security Technical Implementation Guides (STIGs) and Security Requirements Guides (SRGs).
• Utilize the Assured Compliance Assessment Solution (ACAS) to scan for, identify, and coordinate the remediation of system vulnerabilities.
• Identify, report, and track cybersecurity incidents and data spills in accordance with USAF and DoW incident response directives.
• Draft, review, and maintain System Security Plans (SSP), continuous tracking of Plan of Action and Milestones (POA&M), and system-specific operating procedures.
• Deep understanding of the NIST RMF lifecycle, DoDI 8510.01, and USAF-specific guidance (e.g., AFI 17-101, Risk Management Framework for Air Force Information Technology).