Information Systems Security Officer, Senior (ISSO-S)

Alex-alternative Experts, Inc; Fort Meade (MD); On-site; USD 205,000 - 220,000; Full time

Job summary

ALEX is seeking a highly experienced Senior ISSO-S to lead the development, implementation, and oversight of cybersecurity policies for complex, classified systems at Fort Meade. The role ensures regulatory compliance, risk management, and lifecycle support from design through decommissioning.

Responsibilities include maintaining SSPs, achieving ATO, conducting risk assessments, and coordinating incident response. No formal education required; TS/SCI with FSP clearance is needed.

Qualifications

• Develop, implement, and maintain security policies, procedures, and protocols.
• Ensure compliance with NIST SP 800-53, RMF, FISMA, JSIG, DAAPM, and other applicable frameworks.
• Lead efforts to achieve and maintain Authority to Operate (ATO).
• Conduct risk assessments and vulnerability scans using tools like ACAS, SCAP, and STIGs.
• Manage POA&Ms and ensure timely mitigation of identified vulnerabilities.
• Oversee configuration management and change control processes.
• Integrate security requirements into the System Development Lifecycle (SDLC).
• Maintain and update System Security Plans (SSPs) and other authorization documentation.
• Register and manage systems in eMASS or equivalent platforms.
• Coordinate cybersecurity incident response and reporting.
• Monitor system logs and network traffic for anomalies.
• Investigate security breaches and recommend corrective actions.
• Serve as a key advisor to system owners and stakeholders.
• Collaborate with ISSMs, ISSEs, PMs, and AOs to ensure security posture is maintained.
• Provide security awareness training and guidance to users.

Responsibilities

• Lead development and oversight of cybersecurity policies and procedures.
• Ensure compliance with federal regulations and industry standards.
• Manage risk and support system lifecycle from design through decommissioning.
• Lead efforts to achieve and maintain Authority to Operate (ATO).
• Coordinate cybersecurity incident response and reporting.
• Provide security awareness training and guidance to users.

Skills

Security governance

Compliance frameworks

NIST SP 800-53

RMF

FISMA

JSIG

ATO

Vulnerability assessment

ACAS

SCAP

STIGs

POA&Ms

Configuration management

Change control

SSP documentation

eMASS

Incident response

Log monitoring

Security training

Education

No formal education requirement

Tools

ACAS

SCAP

STIGs

Job description

Information Systems Security Officer, Senior (ISSO-S)

Location: Fort Meade, MD • Clearance Level: TS/SCI with FSP

Position Type: Full-time

Description

ALEX is seeking a highly experienced Senior ISSO-S. The ISSO-S is responsible for leading the development, implementation, and oversight of cybersecurity policies and procedures for complex, classified systems. This role ensures compliance with federal regulations and industry standards, manages risk, and supports the system lifecycle from design through decommissioning.

Requirements

Security Governance & Compliance

• Develop, implement, and maintain security policies, procedures, and protocols.
• Ensure compliance with NIST SP 800-53, RMF, FISMA, JSIG, DAAPM, and other applicable frameworks.
• Lead efforts to achieve and maintain Authority to Operate (ATO).
• Conduct risk assessments and vulnerability scans using tools like ACAS, SCAP, and STIGs.
• Manage POA&Ms and ensure timely mitigation of identified vulnerabilities.
• Oversee configuration management and change control processes.

System Lifecycle Support

• Integrate security requirements into the System Development Lifecycle (SDLC).
• Maintain and update System Security Plans (SSPs) and other authorization documentation.
• Register and manage systems in eMASS or equivalent platforms.
• Coordinate cybersecurity incident response and reporting.
• Monitor system logs and network traffic for anomalies.
• Investigate security breaches and recommend corrective actions.
• Serve as a key advisor to system owners and stakeholders.
• Collaborate with ISSMs, ISSEs, PMs, and AOs to ensure security posture is maintained.
• Provide security awareness training and guidance to users.

Education

• No formal education requirement.

Experience

• Demonstrated experience in required skills.

ALEX is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, age, national origin, protected veteran status, or disability. Applicants must be able to perform the essential functions of the job.

In order to comply with the Equal Pay for Equal Work Act, we reasonably believe the pay range for this position is between $205k - $220k. Multiple factors are taken into account with any offer of employment by ALEX, including experience, education, and skills.

Reasonable accommodations will be made to allow employees to meet the essential functions of the job unless those accommodations cause undue hardships to the employer. To request a reasonable accommodation, contact the Human Resources Department at [e-mail].