Senior Information System Security Officer (ISSO)

COLSA; Huntsville (AL); Hybrid; USD 120,000 - 180,000; Full time

Benefits offered by this job

Medical

Dental

Vision

Life Insurance

Short-Term Disability

Long-Term Disability

AD&D

401(k) with company match

Flexible Spending Accounts

Employee Assistance Program

Education & Certification Reimburse

Employee Discount Program

Paid Time Off and Holidays

Job summary

COLSA is seeking a Senior Information System Security Officer (ISSO) to support Army information systems with RMF across all phases. The role involves security documentation, control implementation, assessment, and tracking remediation and POA&Ms.

The successful candidate will collaborate with system owners, engineers, and program stakeholders to maintain acceptable security postures, including public-facing components, and work in a hybrid in-office/remote environment in Huntsville, AL.

Qualifications

• Bachelor’s degree in cybersecurity, information technology, computer science, information systems, engineering, or a related discipline.
• 10-12 years of progressively responsible experience in cybersecurity, information assurance, RMF, or information system security.
• Experience supporting RMF activities across all phases, including documentation, security control implementation, assessment support, authorization, and continuous monitoring.
• Experience serving as an Army ISSO or equivalent role for Army systems.
• Experience developing, maintaining, and reviewing RMF security documentation and authorization packages.
• Experience using ACAS, CMRS, STIGs, and vulnerability-management processes.
• Experience managing POA&Ms, findings, corrective actions, and closure decisions.
• Experience supporting cybersecurity for public-facing or externally accessible systems.
• Strong understanding of vulnerability management, configuration compliance, risk documentation, and continuous monitoring.
• Ability to communicate complex technical risks clearly to technical teams, managers, and leadership.
• Ability to work independently, prioritize, and coordinate with diverse stakeholders.
• Active Secret clearance; US Citizenship required.

Responsibilities

• Develop, maintain, and update RMF documentation including SSPs, assessment artifacts, and PMOs.
• Coordinate with system owners and engineers to implement and validate security controls.
• Review vulnerability scans, findings, and risk assessments to propose remediation.
• Use ACAS, CMRS, STIGs, and related tools to improve system security posture.
• Track POA&Ms, remediation progress, and closure decisions with appropriate authorities.
• Support security of public-facing systems by mitigating risks from external services.
• Perform continuous monitoring activities and update security artifacts.
• Prepare senior-level status reports and risk briefs for leadership.
• Provide technical guidance and mentorship to junior RMF/ISSO personnel.

Skills

RMF expertise

Security documentation

Vulnerability management

Communication to leadership

Independent work

Mentorship

Public-facing system security

Education

Bachelor's degree in cybersecurity or related field

Tools

ACAS

CMRS

STIGs

POA&M management

Job description

General Summary

COLSA is seeking a Senior Information System Security Officer (ISSO) supports the cybersecurity authorization, assessment, and continuous monitoring of Army information systems. This position provides senior-level technical and programmatic expertise across all RMF phases, including security documentation development, control implementation and validation, security assessment support, remediation tracking, and ongoing compliance monitoring.

Tracking Code 9839-987

Posted Date 10/23/2026

Job Location Huntsville, Alabama

Location of Position Huntsville, Alabama

Work Arrangement Hybrid: (In Office & Home)

Position Type Full-Time/Regular

Clearance Required? Yes

Level of Clearance Required Secret

General Summary

COLSA is seeking a Senior Information System Security Officer (ISSO) supports the cybersecurity authorization, assessment, and continuous monitoring of Army information systems. This position provides senior-level technical and programmatic expertise across all RMF phases, including security documentation development, control implementation and validation, security assessment support, remediation tracking, and ongoing compliance monitoring.

The successful candidate will have prior experience work with system owners, security control assessors, engineers, administrators, and program stakeholders to ensure systems maintain an acceptable security posture and meet applicable Army cybersecurity and RMF requirements. This role requires extensive experience supporting complex environments, including public-facing components, and managing security vulnerabilities, findings, and Plans of Action and Milestones (POA&Ms).

Knowledge of, or experience applying, artificial intelligence (AI), automation, or advanced analytics to improve cybersecurity operations is highly preferred. This may include using AI-enabled tools to support vulnerability prioritization, security documentation review, continuous monitoring, risk analysis, compliance reporting, and remediation tracking.

Principal Duties and Responsibilities (*Essential Functions)

• Develop, maintain, and update RMF documentation, including System Security Plans (SSPs), security assessment artifacts, control implementation statements, risk assessments, continuous monitoring plans, and POA&Ms.
• Coordinate with system owners, information system security managers, engineers, administrators, and assessors to implement and validate security controls.
• Review and analyze vulnerability scan results, compliance findings, and security assessment results to identify risks and develop remediation recommendations.
• Use Assured Compliance Assessment Solution (ACAS), Cyber Management Review System (CMRS), Security Technical Implementation Guides (STIGs), and related cybersecurity tools to assess and improve system security posture.
• Track vulnerabilities, findings, waivers, exceptions, and remediation activities; manage POA&Ms through closure or risk acceptance by the appropriate authority.
• Support the security of public-facing systems and components by identifying, documenting, and mitigating risks associated with externally accessible services.
• Perform continuous monitoring activities, including periodic control reviews, vulnerability management, configuration compliance reviews, and security artifact updates.
• Prepare senior-level status reports, risk summaries, briefings, and recommendations for program leadership and cybersecurity stakeholders.
• Provide technical guidance and mentorship to junior RMF, ISSO, and cybersecurity personnel

At COLSA, people are our most valuable resource and centered at our core value. We invite you to unite your talents with opportunity and be a part of our “Family of Professionals!” Learn about our employee-centric culture and benefits here: https://www.colsa.com/culture_benefits

Required Experience

• Bachelor’s degree in cybersecurity, information technology, computer science, information systems, engineering, or a related discipline.
• 10-12 years of progressively responsible experience in cybersecurity, information assurance, RMF, or information system security.
• Demonstrated experience supporting RMF activities across all phases, including documentation, security control implementation, assessment support, authorization activities, and continuous monitoring.
• Experience serving as an Army ISSO or in a substantially equivalent information system security role supporting Army systems.
• Demonstrated experience developing, maintaining, and reviewing RMF security documentation and authorization packages.
• Experience using ACAS, CMRS, STIGs, and vulnerability-management processes to identify, assess, and remediate cybersecurity risks.
• Experience managing POA&Ms, including documenting findings, assigning corrective actions, tracking remediation progress, and supporting closure decisions.
• Experience supporting cybersecurity requirements for public-facing systems or externally accessible components.
• Strong understanding of vulnerability management, configuration compliance, security control assessment, risk documentation, and continuous monitoring practices.
• Ability to communicate complex technical risks and compliance issues clearly to technical teams, program managers, and senior leadership.
• Ability to work independently, prioritize multiple efforts, and lead coordination across diverse technical and programmatic stakeholders.
• Active Secret clearance; US Citizenship required;

Preferred Qualifications

• Master’s degree in cybersecurity, information technology, information systems, engineering, or a related field.
• Relevant cybersecurity or RMF certifications, such as Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Certified Authorization Professional (CAP), Security+, or similar credentials.
• Experience supporting Army enterprise systems, cloud environments, hybrid infrastructure, or DevSecOps programs.
• Knowledge of applying artificial intelligence (AI), machine learning, automation, or advanced analytics to cybersecurity activities, such as vulnerability prioritization, security-event analysis, compliance monitoring, documentation review, or POA&M management.
• Experience serve as a cybersecurity subject matter expert supporting the development and automation of AI-enabled RMF software, translating RMF processes, NIST SP 800-53 control requirements, assessment activities, and cybersecurity workflows into software requirements and automated capabilities.
• Experience evaluating the cybersecurity implications, governance considerations, and security controls associated with AI-enabled systems or tools.
• Experience developing dashboards, metrics, or automated workflows for RMF status reporting, vulnerability management, or continuous monitoring.

Applicant selected will be subject to a government security investigation and must meet eligibility requirements for access to classified information.

COLSA Corporation is an Equal Opportunity Employer, Minorities/Females/Veterans/Disabled. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, or national origin.

Salary Type Annually

The salary range, if referenced, represents a good faith estimate. COLSA considers various factors when determining base salary offers, but not limited to, location, the role, function and associated responsibilities, a candidate’s particular combination of education, knowledge, skills, competencies, and experience, as well as contract-specific affordability and organizational requirements.

• Medical
• Dental
• Vision
• Life Insurance
• Short-Term Disability
• Long-Term Disability
• Accidental Death & Dismemberment
• Supplemental Income Protection Programs
• 401(k) with company match
• Flexible Spending Accounts
• Employee Assistance Program
• Education & Certification Reimbursement
• Employee Discount Program
• Paid Time Off and Holidays

This position will be posted for a minimum of 3 business days. If a candidate has not been selected at that time, it will continue to be posted until a suitable candidate is selected or the position is closed.