ISSO II: Cyber Security & Compliance Lead

The Charles Stark Draper Laboratory, Inc.; Massachusetts; On-site; USD 82,000 - 220,000; Full time

Job summary

The Charles Stark Draper Laboratory, Inc. in Cambridge, MA is seeking an Information System Security Officer 2 (ISSO) to support continuous monitoring and authorization for multiple classified information systems.

You will work under the ISSM and ISO, updating SSPs, managing changes, and assessing security impact in a collaborative, cross-functional environment. Responsibilities include auditing, RMF/NIST guidance, training, and incident handling.

Qualifications

• Bachelor's degree required; equivalent experience accepted.
• IAM I/IAT II or higher certification is preferred.
• 3–5 years of relevant industry experience required.

Responsibilities

• Assist the ISSM in duties; may assume ISSM responsibilities in their absence.
• Ensure systems operate and dispose according to security policies.
• Attend required security training for assigned duties.
• Ensure users have proper clearances and need-to-know.
• Conduct periodic reviews of information systems for compliance.
• Coordinate hardware/software changes with ISSM and AO/DAO.
• Monitor recovery processes and ensure security features are intact.
• Maintain current security documentation accessible to authorized personnel.
• Perform ConMon activities and respond to incidents as needed.
• Manage configuration baselines of hardware and software.
• Identify architecture flaws using STIG/SCAP/Nessus guidance.

Skills

RMF Knowledge

Auditing Techniques

Security Basics

Education

Bachelor's degree in IT or related field

IAM I/IAT II Certification

Tools

Nessus

SCAP

Job description

The Charles Stark Draper Laboratory, Inc. in Cambridge, MA is seeking an Information System Security Officer 2 (ISSO) to support continuous monitoring and authorization for multiple classified information systems.

You will work under the ISSM and ISO, updating SSPs, managing changes, and assessing security impact in a collaborative, cross-functional environment. Responsibilities include auditing, RMF/NIST guidance, training, and incident handling.