Senior Information Systems Security Officer (Clearance Required)

Kroll; Fort Meade (MD); On-site; USD 100,000 - 150,000; Full time

Benefits offered by this job

Healthcare Coverage

Generous PTO

Retirement plans with company matching

Job summary

Kroll is seeking a highly experienced Senior Information Systems Security Officer in Fort Meade, Maryland. The ISSO-S is responsible for leading the development, implementation, and oversight of cybersecurity policies for classified systems, ensuring compliance with federal regulations.

Key responsibilities include conducting risk assessments, integrating security into the System Development Lifecycle, and providing security awareness training. The role offers a salary range of $100,000 to $150,000 and comprehensive benefits.

Qualifications

• 10+ years of experience in cybersecurity or information assurance.
• Strong understanding of federal regulations related to cybersecurity.
• Ability to lead and collaborate with diverse stakeholders.

Responsibilities

• Lead the development and oversight of cybersecurity policies.
• Conduct risk assessments and vulnerability scans.
• Integrate security requirements into the SDLC.
• Coordinate incident response and monitor for anomalies.

Skills

Cybersecurity policy development

NIST SP 800-53 compliance

Risk assessment and vulnerability scan

Configuration management

Incident response coordination

User security awareness training

Tools

ACAS

SCAP

STIGs

eMASS

Job description

Senior Information Systems Security Officer (Clearance Required)

Kroll is seeking a highly experienced Senior ISSO-S. The ISSO-S is responsible for leading the development, implementation, and oversight of cybersecurity policies and procedures for complex, classified systems. This role ensures compliance with federal regulations and industry standards, manages risk, and supports the system lifecycle from design through decommissioning.

Security Governance & Compliance

• Develop, implement, and maintain security policies, procedures, and protocols.
• Ensure compliance with NIST SP 800‑53, RMF, FISMA, JSIG, DAAPM, and other applicable frameworks.
• Lead efforts to achieve and maintain Authority to Operate (ATO).
• Conduct risk assessments and vulnerability scans using tools like ACAS, SCAP, and STIGs.
• Manage POA&Ms and ensure timely mitigation of identified vulnerabilities.
• Oversee configuration management and change control processes.

System Lifecycle Support

• Integrate security requirements into the System Development Lifecycle (SDLC).
• Maintain and update System Security Plans (SSPs) and other authorization documentation.
• Register and manage systems in eMASS or equivalent platforms.
• Coordinate cybersecurity incident response and reporting.
• Monitor system logs and network traffic for anomalies.
• Investigate security breaches and recommend corrective actions.
• Serve as a key advisor to system owners and stakeholders.
• Collaborate with ISSMs, ISSEs, PMs, and AOs to ensure security posture is maintained.
• Provide security awareness training and guidance to users.

Benefits

• Healthcare Coverage: Comprehensive medical, dental, and vision plans.
• Paid time off and leave policies: Generous PTO, paid holidays, parental and family leave.
• Protective insurances: Life insurance, short- and long-term disability coverage, and accident protection.
• Competitive compensation and rewards: Salary structures, performance incentives, merit-based reviews.
• Retirement plans: 401(k) with company matching.
• Note: Benefits may vary by region, department and role. Please speak with a recruiter to learn more.

The current salary range for this position is $100,000 to $150,000.

We are proud to be an equal opportunity employer and will consider all qualified applicants regardless of gender, gender identity, race, religion, color, nationality, ethnic origin, sexual orientation, marital status, veteran status, age or disability.