Senior Information Systems Security Officer (ISSO)

Global Dimensions, LLC; Annapolis, Washington, Reston (MD, District of Columbia, VA); On-site; USD 140,000 - 210,000; Full time

Job summary

Global Dimensions, LLC seeks a Senior ISSO to lead RMF, ATO, and security program activities for an IC customer in the Annapolis area. You will drive risk management, security assessments, and continuous monitoring across the system lifecycle, coordinating with ISSMs, AO, and developers.

The role requires TS/SCI clearance, DoD 8570/8140 certifications, and deep expertise in NIST 800-53, ICD 503, XACTA, and cloud security. Strong communication and leadership are essential.

Qualifications

• Active TS/SCI clearance with CI polygraph is required.
• 18+ years in information security, cybersecurity, or related fields.
• DoD 8570/8140 certifications must be met; CompTIA Security+ or equivalent.
• Experience with RMF, ICPD 503, and system authorization processes.

Responsibilities

• Lead RMF processes, security assessments, and ATO activities across SDLC.
• Develop and maintain SSPs, SAPs, POA&Ms using XACTA and government standards.
• Coordinate with ISSMs, ISSEs, and AO to ensure regulatory compliance.
• Implement NIST 800-53 controls in DPaaS/cloud-native environments.
• Provide guidance to executives and engineers on security posture.

Skills

TS/SCI clearance

NIST RMF

Security assessments

XACTA

Splunk

Zero Trust

IAM concepts

Education

Bachelor's degree in a relevant field

Tools

XACTA

Splunk

Job description

Senior Information Systems Security Officer (ISSO)

Annapolis, Maryland, United States, Washington, District of Columbia, United States, Reston, Virginia, United States

Global Dimensions is currently seeking a highly experienced and skilled Senior Information Systems Security Officer (ISSO) to support mission-critical cybersecurity and information assurance requirements for an Intelligence Community (IC) customer in Annapolis Junction, Maryland; Washington, DC; or Reston, Virginia. The successful candidate will play a pivotal role in strengthening enterprise security, ensuring regulatory compliance, managing cybersecurity risks, and supporting the authorization and continuous monitoring of complex information systems.

The Senior ISSO will oversee and support Risk Management Framework (RMF) processes, security assessments, compliance activities, and Authorization to Operate (ATO) efforts throughout the system development life cycle. This position requires extensive expertise in NIST SP 800-53 security controls, ICD 503, XACTA, Zero Trust architecture, and cloud-native security environments. The ideal candidate will demonstrate advanced technical judgment, strong leadership capabilities, and the ability to collaborate with cybersecurity professionals, system owners, developers, and government stakeholders to ensure systems meet applicable security requirements.

Essential Job Functions:

Conduct comprehensive technical security assessments, vulnerability evaluations, and compliance reviews to identify cybersecurity risks and recommend appropriate mitigation strategies.

Support the design, implementation, and continuous improvement of information system security controls, cybersecurity processes, and enterprise security initiatives.

Ensure assigned information systems comply with applicable Intelligence Community security policies, Risk Management Framework (RMF) requirements, and federal cybersecurity standards throughout the program life cycle.

Collaborate with application leads, system administrators, database administrators, software developers, and testing teams to integrate security requirements into system design, development, deployment, and maintenance activities.

Provide technical guidance and security compliance expertise to ensure systems are developed with security controls and regulatory requirements incorporated from the outset.

Support systems in achieving and maintaining Authorization to Operate (ATO) by identifying compliance gaps, coordinating remediation activities, and maintaining required security documentation.

Plan, coordinate, and support security assessment events, responding to technical inquiries and compliance requirements from Information Systems Security Managers (ISSMs) and Security Control Assessors (SCAs).

Develop, review, update, and maintain System Security Plans (SSPs), Security Assessment Plans (SAPs), Plans of Action and Milestones (POA&Ms), and other required security authorization documentation using XACTA.

Lead and coordinate Interim Authorization to Test (IATT) and Authorization to Operate (ATO) activities, working closely with cybersecurity teams, system owners, stakeholders, and the Authorizing Official (AO).

Implement, assess, and validate NIST SP 800-53 security controls within cloud-native Data Platform as a Service (DPaaS) environments to ensure compliance with applicable security requirements.

Apply Zero Trust security principles to protect enterprise data services, including identity and access management, network segmentation, access restrictions, and data flow controls.

Evaluate existing IT architectures, system configurations, and security implementations against applicable security frameworks, including ICD 503, to identify deficiencies and recommend corrective actions.

Utilize Splunk and other approved security monitoring tools to review system activity, support security assessments, and identify potential security concerns.

Coordinate with ISSMs, Information Systems Security Engineers (ISSEs), system owners, developers, and government security representatives to resolve compliance issues and support security authorization decisions.

Monitor and track security findings, vulnerabilities, remediation activities, and POA&M milestones to ensure timely resolution and sustained compliance.

Provide cybersecurity expertise, technical recommendations, and security status updates to program leadership, government stakeholders, and engineering teams.

Support continuous monitoring activities and ongoing improvements to system security posture, operational resilience, and cybersecurity risk management practices.

Required Skills:

Due to the sensitivity of customer related requirements, U.S. Citizenship is required.

Active Top Secret/Sensitive Compartmented Information (TS/SCI) security clearance with an active Counterintelligence (CI) Polygraph is required.

Eighteen (18) years of professional experience in information security, cybersecurity, systems engineering, or a closely related technical field with comparable responsibilities and scope.

Education may substitute for professional experience as follows: A bachelor's degree may substitute for four (4) years of experience, and a master's degree may substitute for six (6) years of experience.

DoD 8570/8140 (formerly 8540) certification requirements must be met, including a current CompTIA Security+ certification or another qualifying IAT Level II or III certification, as applicable to the position.

Demonstrated proficiency with XACTA and the Risk Management Framework (RMF), including managing and supporting Interim Authorization to Test (IATT) and Authorization to Operate (ATO) processes.

Strong working knowledge of Splunk, including its use in security monitoring, event analysis, and compliance-related activities.

Experience conducting technical security assessments and architecture reviews to evaluate compliance with applicable cybersecurity requirements and security frameworks, including Intelligence Community Directive (ICD) 503.

Demonstrated expertise implementing, assessing, and maintaining NIST SP 800-53 security controls within enterprise information systems.

Extensive experience developing, reviewing, and maintaining System Security Plans (SSPs), Security Assessment Plans (SAPs), Plans of Action and Milestones (POA&Ms), and other security assessment and authorization artifacts.

Proven ability to coordinate effectively with ISSMs, ISSEs, system owners, Security Control Assessors, and Authorizing Officials to support cybersecurity compliance and authorization requirements.

Strong understanding of information system security principles, risk assessment methodologies, vulnerability management, and continuous monitoring processes.

Experience supporting security compliance activities throughout the system development life cycle, including system design, development, testing, deployment, and maintenance.

Demonstrated ability to identify security risks, evaluate technical vulnerabilities, recommend mitigation strategies, and support the implementation of corrective actions.

Excellent analytical, problem-solving, technical documentation, and communication skills, with the ability to explain complex cybersecurity requirements to technical and nontechnical stakeholders.

Ability to work independently, manage competing priorities, and collaborate effectively in a highly technical, mission-focused Intelligence Community environment.

Desired Skills:

Previous experience serving as an Information Systems Security Officer (ISSO) or Information Systems Security Engineer (ISSE) supporting government, defense, or Intelligence Community programs.

Demonstrated experience leading cybersecurity initiatives for large-scale or mission-critical programs, including the development and implementation of enterprise security strategies.

Proven leadership experience managing or coordinating cybersecurity professionals, technical teams, and cross-functional security initiatives.

Experience supporting cloud-native architectures, Data Platform as a Service (DPaaS) environments, and Zero Trust security implementations.

Strong understanding of identity and access management, network segmentation, data protection, and secure information flow controls.

Demonstrated success communicating and collaborating with government customers, program managers, executive leadership, system engineers, and cybersecurity stakeholders.

Experience providing technical leadership, cybersecurity guidance, and strategic recommendations to improve enterprise security posture and regulatory compliance.

Voluntary Self-Identification

For government reporting purposes, we ask candidates to respond to the below self-identification survey.Completion of the form is entirely voluntary. Whatever your decision, it will not be considered in the hiringprocess or thereafter. Any information that you do provide will be recorded and maintained in aconfidential file.

As set forth in Global Dimensions, LLC’s Equal Employment Opportunity policy,we do not discriminate on the basis of any protected group status under any applicable law.

If you believe you belong to any of the categories of protected veterans listed below, please indicate by making the appropriate selection.As a government contractor subject to the Vietnam Era Veterans Readjustment Assistance Act (VEVRAA), we request this information in order to measurethe effectiveness of the outreach and positive recruitment efforts we undertake pursuant to VEVRAA. Classification of protected categoriesis as follows:

A "disabled veteran" is one of the following: a veteran of the U.S. military, ground, naval or air service who is entitled to compensation (or who but for the receipt of military retired pay would be entitled to compensation) under laws administered by the Secretary of Veterans Affairs; or a person who was discharged or released from active duty because of a service‑connected disability.

A "recently separated veteran" means any veteran during the three‑year period beginning on the date of such veteran's discharge or release from active duty in the U.S. military, ground, naval, or air service.

An "active duty wartime or campaign badge veteran" means a veteran who served on active duty in the U.S. military, ground, naval or air service during a war, or in a campaign or expedition for which a campaign badge has been authorized under the laws administered by the Department of Defense.

An "Armed forces service medal veteran" means a veteran who, while serving on active duty in the U.S. military, ground, naval or air service, participated in a United States military operation for which an Armed Forces service medal was awarded pursuant to Executive Order 12985.