Lead ISSO & Security SME for ATO

Noetic Strategies, Inc.; Huntsville (AL); On-site; USD 100,000 - 150,000; Full time

Job summary

Noetic Strategies, Inc. seeks an Information System Security Officer (ISSO) – SME in Huntsville, AL.

The role supports the implementation, oversight, and maintenance of security configurations, controls, and procedures, advising system owners and leadership to sustain proper security posture and ATO readiness. The ISSO will lead ATO documentation, SSPs, and contingency planning, coordinating with multiple teams to ensure compliance and robust risk management for critical information systems.

Qualifications

• Experience implementing, overseeing, and maintaining security configurations for information systems.
• Excellent verbal and written communication skills.
• Strong interpersonal skills.

Responsibilities

• Serve as principal advisor to the SO, BPO, CISO, and ISSM on information system security.
• Ensure the implementation and ongoing maintenance of required security controls.
• Direct and implement security controls to protect information system assets from modification, disclosure, or destruction.
• Provide guidance on physical protection of information system assets.
• Report on data security measures and recommend improvements.
• Assist with ATO documentation and accreditation processes.
• Perform network self-inspections for regulatory compliance.
• Create and update SSP and Information System Contingency Plan documentation for ATO.
• Develop POA&Ms based on vulnerability data and record findings.

Skills

Verbal communication

Written communication

Interpersonal skills

Education

B.S. or B.A. degree

Tools

Xacta

Job description

Noetic Strategies, Inc. seeks an Information System Security Officer (ISSO) – SME in Huntsville, AL.

The role supports the implementation, oversight, and maintenance of security configurations, controls, and procedures, advising system owners and leadership to sustain proper security posture and ATO readiness. The ISSO will lead ATO documentation, SSPs, and contingency planning, coordinating with multiple teams to ensure compliance and robust risk management for critical information systems.