Senior Information Systems Security Officer (ISSO)

Benz Technology; Fort Meade (MD); On-site; USD 100,000 - 160,000; Full time

Job summary

Benz Technology is seeking an Information System Security Officer (ISSO) in Maryland to maintain the security posture of critical information systems under RMF. The role is hands-on, requiring technical depth and proactive risk mitigation in collaboration with the ISSM.

Candidates must have an IAM Tier 1 certification and experience with system accreditation packages, continuous monitoring tools, RMF workflows, and security compliance. U.S.

Qualifications

• IAM Tier 1 certification (e.g., CAP, GSLC, Security+ CE, or equivalent).
• Experience maintaining system accreditation and authorization packages.
• Hands-on experience with continuous monitoring tools and security compliance processes.
• Familiarity with RMF-based system authorization workflows.

Responsibilities

• Maintain and enforce the operational security posture of assigned information systems
• Monitor networks continuously to detect security non-compliance, unmitigated vulnerabilities, and emerging risks
• Conduct regular audits of information systems to assess and document security controls
• Execute and contribute to the information systems continuous monitoring program
• Support the ISSM in preparing systems for periodic reaccreditation
• Apply and enforce consistent security processes across assigned systems and environments

Skills

IAM Tier 1 certification

System accreditation experience

Continuous monitoring tools

RMF workflows

Job description

Active TS/SCI security clearance required. Benz Technology is unable to sponsor clearances. U.S. citizenship required.

About the Role

This role is responsible for maintaining the security posture and compliance of critical information systems through the Risk Management Framework (RMF). The ISSO will support continuous monitoring, conduct system audits, and work closely with the Information Systems Security Manager to ensure systems remain accredited and secure. This is a hands‑on security role requiring both technical depth and a proactive approach to identifying and mitigating risk.

Responsibilities

• Maintain and enforce the operational security posture of assigned information systems
• Monitor networks continuously to detect security non-compliance, unmitigated vulnerabilities, and emerging risks
• Conduct regular audits of information systems to assess and document security controls
• Execute and contribute to the information systems continuous monitoring program
• Support the ISSM in preparing systems for periodic reaccreditation
• Apply and enforce consistent security processes across assigned systems and environments

Required Qualifications

• IAM Tier 1 certification (e.g., CAP, GSLC, Security+ CE, or equivalent)
• Experience maintaining system accreditation and authorization packages
• Hands‑on experience with continuous monitoring tools and security compliance processes
• Familiarity with RMF-based system authorization workflows

Desired Qualifications

• Prior ISSO or ISSE experience with emphasis on Defense‑in‑Depth principles, network security, and enterprise security architecture
• Applied experience with NIST SP 800‑53 controls and RMF implementation
• Familiarity with Secure Terminal Equipment (STE) and Secure Telephone Network (STN) requirements
• Strong written and oral communication skills for documentation and stakeholder reporting