ISSO SME

Noetic Strategies, Inc.; Huntsville (AL); On-site; USD 100,000 - 150,000; Full time

Job summary

Noetic Strategies, Inc. seeks an Information System Security Officer (ISSO) – SME in Huntsville, AL.

The role supports the implementation, oversight, and maintenance of security configurations, controls, and procedures, advising system owners and leadership to sustain proper security posture and ATO readiness. The ISSO will lead ATO documentation, SSPs, and contingency planning, coordinating with multiple teams to ensure compliance and robust risk management for critical information systems.

Qualifications

• Experience implementing, overseeing, and maintaining security configurations for information systems.
• Excellent verbal and written communication skills.
• Strong interpersonal skills.

Responsibilities

• Serve as principal advisor to the SO, BPO, CISO, and ISSM on information system security.
• Ensure the implementation and ongoing maintenance of required security controls.
• Direct and implement security controls to protect information system assets from modification, disclosure, or destruction.
• Provide guidance on physical protection of information system assets.
• Report on data security measures and recommend improvements.
• Assist with ATO documentation and accreditation processes.
• Perform network self-inspections for regulatory compliance.
• Create and update SSP and Information System Contingency Plan documentation for ATO.
• Develop POA&Ms based on vulnerability data and record findings.

Skills

Verbal communication

Written communication

Interpersonal skills

Education

B.S. or B.A. degree

Tools

Xacta

Job description

Information System Security Officer (ISSO) – SME

Location: Huntsville, AL (HSV)

Summary

Noetic is seeking an Information System Security Officer (ISSO) – Subject Matter Expert (SME) to support the implementation, oversight, and maintenance of information system security configurations, controls, practices, and procedures. The ISSO will serve as a principal security advisor to system owners and information security leadership, ensuring systems maintain appropriate security controls and supporting the Authority to Operate (ATO) documentation and accreditation process.

Primary Responsibilities

• Serve as the principal advisor to the Information System Owner (SO), Business Process Owner, Chief Information Security Officer (CISO), and Information System Security Manager (ISSM) on matters related to information system security.

• Ensure the implementation and ongoing maintenance of required security controls.

• Direct and implement security controls and procedures to protect information system assets from intentional or inadvertent modification, disclosure, or destruction.

• Provide guidance to other functional units regarding the physical protection of information system assets.

• Report on the effectiveness of data security measures and recommend new or improved security procedures.

• Assist with reviewing, developing, and navigating system teams and customers through the Authority to Operate (ATO) accreditation and certification documentation process.

• Perform network self-inspections to assess compliance with applicable security requirements.

• Create and update documentation required for the ATO package, including the System Security Plan (SSP) and Information System Contingency Plan.

• Develop Plans of Action and Milestones (POA&Ms) based on vulnerability data and enter findings into the designated system of record.

Basic Qualifications

• Bachelor of Science (B.S.) or Bachelor of Arts (B.A.) degree.

• Experience implementing, overseeing, and maintaining security configurations, practices, and procedures for information systems.

• Excellent verbal and written communication skills.

• Strong interpersonal skills.

Preferred Qualifications

• Experience with Xacta.

• CISSP or a CompTIA certification.