Information Systems Security Officer with Security Clearance

BOAB Ventures; Washington (District of Columbia); On-site; USD 180,000 - 240,000; Full time

Job summary

BOAB Ventures is seeking an Information Systems Security Officer (ISSO) to serve as the cybersecurity authority across all information systems supporting a high-visibility Intelligence Community program.

This is a Senior ISSO leadership role - you'll own the security posture across classified environments, including JWICS-based AI platforms, and advise program leadership directly on risk, compliance, and mitigation strategy.

Qualifications

• Active TS/SCI clearance with polygraph preferred.
• CISSP certification required; other DoD certs welcomed (CISM, CAP, CASP+).
• DoD 8570/8140 IAM Level III compliant.
• Deep expertise in RMF, ICD 503, CNSSI 1253, IC/DoD security policy.

Responsibilities

• Serve as the senior security authority for all program information systems.
• Own RMF lifecycle across multiple systems and drive ATOs.
• Develop and enforce information security policies tailored to IC environments.
• Advise leadership on cybersecurity risk posture and mitigation strategies.
• Lead continuous monitoring, control assessments, and vulnerability management.
• Direct incident response, forensics, and after-action reporting for security events.
• Mentor ISSO personnel and coordinate with IC/DoD security stakeholders.
• Ensure architecture/engineering decisions align with mission requirements.

Skills

Senior security leadership

RMF lifecycle

Risk management

Incident response

Mentoring

Security architecture

Threat monitoring

CISSP

Education

CISSP certification

DoD 8570 IAM Level III

CNSSI 1253 familiarity

NIST RMF / SP 800-53 knowledge

Tools

JWICS

AWS GovCloud

Azure Government

Job description

Job Description BOAB Ventures is seeking a Information Systems Security Officer (ISSO) to serve as the cybersecurity authority across all information systems supporting a high-visibility Intelligence Community program. This is a Senior ISSO leadership role - you'll own the security posture across classified environments, including JWICS-based AI platforms, and advise program leadership directly on risk, compliance, and mitigation strategy. This isn't checkbox security. You'll be shaping the policies that determine how the customer manages and protects AI capabilities across the Defense Intelligence Enterprise. If you want your work to have a direct line to warfighter mission success, this is the seat.

What You'll Do

• Serve as the senior security authority for all program information systems, providing direct oversight to ISSOs and security staff.
• Own the RMF lifecycle across multiple systems - driving ATOs from initiation through continuous monitoring in compliance with ICD 503 and NIST standards.
• Develop and enforce information security policies, procedures, and standards tailored to IC operational environments.
• Advise program leadership and the Authorizing Official on cybersecurity risk posture, mitigation strategies, and residual risk acceptance decisions.
• Lead continuous monitoring, security control assessments, and vulnerability management across the program.
• Direct incident response, forensic investigations, and after-action reporting for security events on classified systems.
• Manage and mentor ISSO personnel - set clear lanes, build workflows, and develop your team.
• Coordinate with IC and DoD security stakeholders including IGs, inspectors, and oversight bodies.
• Ensure security architecture and engineering decisions align with mission requirements and applicable directives (ICD 503, CNSSI 1253, NIST SP 800-53).
• Evaluate emerging threats and drive proactive security improvements across AI/ML and data platforms.
• Support audits, inspections, and government oversight reviews.
• Active TS/SCI clearance; must be able to obtain a Polygraph (prior CI Poly strongly preferred).
• Deep expertise in NIST RMF, ICD 503, CNSSI 1253, and IC/DoD security policy frameworks.
• Proven track record achieving and maintaining ATOs for complex, multi-system programs in classified environments.
• Strong background in security architecture, risk management, and incident response within JWICS or similar classified networks.
• Experience leading and mentoring security teams in a fast-paced, mission-critical environment
• CISSP required; CISM, CAP, or CASP+ strongly preferred.
• DoD 8570/8140 IAM Level III compliant.
• Familiarity with AI/ML security frameworks and challenges in classified deployments.
• AWS GovCloud or Azure Government experience.
• Military Intelligence or IC background.