Senior Information System Security Officer ISSO

COLSA Corporation; Huntsville (AL); Sur place; USD 150 000 - 190 000; Plein temps

Résumé du poste

COLSA Corporation seeks a Senior Information System Security Officer (ISSO) to support Army information systems through RMF documentation, control implementation, and continuous monitoring. You will work with system owners, engineers, and assessors to ensure an acceptable security posture and compliance with Army requirements.

The role emphasizes experience with RMF across all phases, vulnerability management, and remediation tracking, with preferred knowledge of AI/automation to enhance

Qualifications

• Bachelor’s degree in cybersecurity, information technology, computer science, information systems, engineering, or a related discipline.
• 10–12 years of progressively responsible experience in cybersecurity, information assurance, RMF, or information system security.
• Experience supporting RMF activities across all phases, including documentation, security control implementation, assessment support, authorization activities, and continuous monitoring.
• Experience serving as an Army ISSO or in a substantially equivalent information system security role supporting Army systems.
• Experience developing, maintaining, and reviewing RMF security documentation and authorization packages.
• Experience using ACAS, CMRS, STIGs, and vulnerability-management processes to identify, assess, and remediate cybersecurity risks.

Responsabilités

• Develop, maintain, and update RMF documentation (SSPs, assessment artifacts, control statements, risk assessments, continuous monitoring plans, POA&Ms).
• Coordinate with system owners, security managers, engineers, administrators, and assessors to implement and validate security controls.
• Review vulnerability scan results, compliance findings, and assessment results to identify risks and remediation recommendations.
• Use ACAS, CMRS, STIGs, and related tools to assess and improve system security posture.
• Track vulnerabilities, findings, waivers, exceptions, and remediation activities; manage POA&Ms through closure or risk acceptance.
• Support security of public-facing systems by identifying and mitigating externally accessible risk.
• Perform continuous monitoring activities including control reviews, vulnerability management, and configuration compliance reviews.
• Prepare senior-level status reports, risk summaries, briefings, and recommendations for leadership and stakeholders.
• Provide technical guidance and mentorship to junior RMF, ISSO, and cybersecurity personnel

Formation

Bachelor’s degree in cybersecurity, information technology, computer science, information systems, engineering, or a related discipline.

Description du poste

General Summary:

COLSA is seeking a Senior Information System Security Officer (ISSO) supports the cybersecurity authorization, assessment, and continuous monitoring of Army information systems. This position provides senior-level technical and programmatic expertise across all RMF phases, including security documentation development, control implementation and validation, security assessment support, remediation tracking, and ongoing compliance monitoring.

The successful candidate will have prior experience work with system owners, security control assessors, engineers, administrators, and program stakeholders to ensure systems maintain an acceptable security posture and meet applicable Army cybersecurity and RMF requirements. This role requires extensive experience supporting complex environments, including public-facing components, and managing security vulnerabilities, findings, and Plans of Action and Milestones (POA&Ms).

Knowledge of, or experience applying, artificial intelligence (AI), automation, or advanced analytics to improve cybersecurity operations is highly preferred. This may include using AI-enabled tools to support vulnerability prioritization, security documentation review, continuous monitoring, risk analysis, compliance reporting, and remediation tracking.

*Principal Duties and Responsibilities (Essential Functions):

• Develop, maintain, and update RMF documentation, including System Security Plans (SSPs), security assessment artifacts, control implementation statements, risk assessments, continuous monitoring plans, and POA&Ms.
• Coordinate with system owners, information system security managers, engineers, administrators, and assessors to implement and validate security controls.
• Review and analyze vulnerability scan results, compliance findings, and security assessment results to identify risks and develop remediation recommendations.
• Use Assured Compliance Assessment Solution (ACAS), Cyber Management Review System (CMRS), Security Technical Implementation Guides (STIGs), and related cybersecurity tools to assess and improve system security posture.
• Track vulnerabilities, findings, waivers, exceptions, and remediation activities; manage POA&Ms through closure or risk acceptance by the appropriate authority.
• Support the security of public-facing systems and components by identifying, documenting, and mitigating risks associated with externally accessible services.
• Perform continuous monitoring activities, including periodic control reviews, vulnerability management, configuration compliance reviews, and security artifact updates.
• Prepare senior-level status reports, risk summaries, briefings, and recommendations for program leadership and cybersecurity stakeholders.
• Provide technical guidance and mentorship to junior RMF, ISSO, and cybersecurity personnel

_At COLSA, people are our most valuable resource and centered at our core value. We invite you to unite your talents with opportunity and be a part of our “Family of Professionals!” Learn about our employee-centric culture and benefits here: https://www.colsa.com/culture_benefits _

Required Skills

Required Experience

• Bachelor’s degree in cybersecurity, information technology, computer science, information systems, engineering, or a related discipline.
• 10-12 years of progressively responsible experience in cybersecurity, information assurance, RMF, or information system security.
• Demonstrated experience supporting RMF activities across all phases, including documentation, security control implementation, assessment support, authorization activities, and continuous monitoring.
• Experience serving as an Army ISSO or in a substantially equivalent information system security role supporting Army systems.
• Demonstrated experience developing, maintaining, and reviewing RMF security documentation and authorization packages.
• Experience using ACAS, CMRS, STIGs, and vulnerability-management processes to identify, assess, and remediate cybersecurity risks.
• Experience managing POA&Ms, including documenting findings, assigning corrective actions, tracking remediation progress, and supporting closure decisions.
• Experience supporting cybersecurity requirements for public-facing systems or externally accessible components.
• Strong understanding of vulnerability management, configuration compliance, security control assessment, risk documentation, and continuous monitoring practices.
• Ability to communicate complex technical risks and compliance issues clearly to technical teams, program managers, and senior leadership.
• Ability to work independently, prioritize multiple efforts, and lead coordination across diverse technical and programmatic stakeholders.
• Active Secret clearance; US Citizenship required;

Preferred Qualifications

• Master’s degree in cybersecurity, information technology, information systems, engineering, or a related field.
• Relevant cybersecurity or RMF certifications, such as Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Certified Authorization Professional (CAP), Security+, or similar credentials.
• Experience supporting Army enterprise systems, cloud environments, hybrid infrastructure, or DevSecOps programs.
• Knowledge of applying artificial intelligence (AI), machine learning, automation, or advanced analytics to cybersecurity activities, such as vulnerability prioritization, security-event analysis, compliance monitoring, documentation review, or POA&M management.
• Experience serve as a cybersecurity subject matter expert supporting the development and automation of AI-enabled RMF software, translating RMF processes, NIST SP 800-53 control requirements, assessment activities, and cybersecurity workflows into software requirements and automated capabilities.
• Experience evaluating the cybersecurity implications, governance considerations, and security controls associated with AI-enabled systems or tools.
• Experience developing dashboards, metrics, or automated workflows for RMF status reporting, vulnerability management, or continuous monitoring.

Applicant selected will be subject to a government security investigation and must meet eligibility requirements for access to classified information. COLSA Corporation is an Equal Opportunity Employer, Minorities/Females/Veterans/Disabled. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, or national origin.