ISSO: Security Compliance & Risk Lead (RMF/ATO)

American Systems; Middletown (RI); On-site; USD 90,000 - 120,000; Full time

Job summary

AMERICAN SYSTEMS is seeking an Information System Security Officer (ISSO) to provide technical and programmatic Information Assurance support for customers. The role covers security documentation, vulnerability assessment support, audit readiness, and implementing security requirements to protect information systems.

The ISSO will support certification and accreditation efforts, conduct security assessments, develop required security documentation, evaluate compliance with applicable laws and

Qualifications

• 2-4 years of experience in information assurance or related field.
• Active Secret clearance.
• CSWF certification preferred.
• Advanced cybersecurity certifications such as CISSP, CASP+, or CISM are a plus.
• Experience with DoD or federal information assurance programs including Authorization to Operate (ATO) package support.
• Familiarity with security scanning, compliance validation, system hardening, and audit support.
• Experience supporting incident response, vulnerability management, and continuous monitoring activities.

Responsibilities

• Supports and implements security requirements within the organization’s processes and system environments.
• Prepare security documentation using RMF, Xacta, and related accreditation processes.
• Lead and facilitate meetings, briefings, and cross-functional discussions with technical and non-technical stakeholders to communicate security status, risks, vulnerabilities, assessment results, and remediation progress, and to drive alignment and timely resolution of identified issues.
• Develop and maintain Security Test and Evaluation (ST&E) plans, ensuring the implementation of Security Technical Implementation Guides (STIGs), and Plan of Action and Milestones (POA&Ms).
• Provide certification and accreditation support, including developing, updating and maintaining security plans (SPs) and contingency plans.
• Conduct complex risk assessments and vulnerability assessments and recommend mitigation strategies.
• Analyze policies, procedures, and system implementations against applicable federal laws, regulations, and security standards; identify gaps and recommend corrective actions.
• Recommend system enhancements and corrective actions to address security deficiencies.
• Oversee secure configuration practices, guides implementation and validation of security tools, reviews compliance scan results, advise stakeholders on remediation priorities, and evaluates products and administrative practices for security impact and enterprise suitability
• Conduct security program audits and develop remediation strategies to reduce identified risks.
• Perform vulnerability assessments and track remediation through resolution.
• Develop strategies to support compliance with privacy, risk management, and e-authentication requirements.
• Provide information assurance support for the development and implementation of security architectures to address new and evolving requirements.
• Evaluate, develop, and enhance security policies, requirements, and tools.
• Support computer security incident investigations and response activities.

Skills

Risk management

Security assessment

Vulnerability management

Incident response

Documentation

Stakeholder coordination

Tools

JIRA

Confluence

Xacta

Job description

AMERICAN SYSTEMS is seeking an Information System Security Officer (ISSO) to provide technical and programmatic Information Assurance support for customers. The role covers security documentation, vulnerability assessment support, audit readiness, and implementing security requirements to protect information systems.

The ISSO will support certification and accreditation efforts, conduct security assessments, develop required security documentation, evaluate compliance with applicable laws and