Senior Information Systems Security Officer (Sr. ISSO)

Bart & Associates, LLC; Washington (District of Columbia); On-site; USD 125,000 - 200,000; Full time

Job summary

Bart & Associates, LLC is seeking a Senior Information Systems Security Officer (ISSO) to lead cybersecurity and RMF/ATO activities across enterprise systems. The role requires coordinating with government stakeholders and engineering teams to implement Zero Trust security architectures and maintain regulatory compliance throughout the system lifecycle.

Responsibilities include risk management, development of SSPs/SAPs/POA&Ms, security assessments, and routine coordination with ISSMs, ISSEs, and

Qualifications

• Active TS/SCI with Polygraph is required.
• Security+ or equivalent DoD IAT II/III certification required.
• 18 years of experience in Cybersecurity, IA, Security Engineering, or related field.
• Experience as ISSO/ISSE or similar role.
• Proficiency with RMF and XACTA.
• Experience managing IATT and ATO processes.
• Proficiency with Splunk.
• Experience with NIST 800-53 controls.
• Strong communication and stakeholder engagement skills.
• Experience supporting large government cybersecurity programs.

Responsibilities

• Conduct technical security assessments and evaluate system security posture.
• Ensure compliance with security frameworks and regulatory requirements.
• Support certification, accreditation, IATT, and ATO activities.
• Collaborate with developers, sysadmins, DBAs, and testers to integrate security across the lifecycle.
• Support security assessment events and remediation efforts.
• Develop and maintain SSPs, POA&Ms, SAPs, and assessment artifacts.
• Utilize XACTA to manage RMF documentation and authorization activities.
• Implement and validate NIST 800-53 controls.
• Apply Zero Trust principles to cloud-native and enterprise environments.
• Manage risk assessments, findings, mitigation strategies, and compliance tracking.
• Coordinate with ISSMs, ISSEs, System Owners, SCAs, and AOs.
• Support security monitoring and compliance reporting using Splunk.

Skills

TS/SCI + Polygraph

Security+ or DoD IAT II/III

18+ years experience

ISSO/ISSE experience

XACTA RMF familiarity

IATT & ATO management

Splunk

NIST 800-53

Zero Trust

Stakeholder engagement

Security documentation

Education

Bachelors in Cybersecurity/Info Assurance/CS/IS

Masters degree substitution for 6 years experience

Tools

XACTA

Splunk

Job description

Senior Information Systems Security Officer (Sr. ISSO)

Summary

The Senior Information Systems Security Officer (ISSO) will lead cybersecurity and compliance efforts supporting mission-critical systems throughout the system lifecycle. The ISSO will ensure security compliance, support authorization activities, manage risk, and coordinate with engineering, operations, and government stakeholders to maintain Authority to Operate (ATO) for enterprise systems. The role includes implementation of RMF controls, development of security documentation, participation in assessments, and support of Zero Trust security architectures.

Key Responsibilities

• Conduct technical security assessments and evaluate system security posture.
• Ensure compliance with applicable security frameworks and regulatory requirements.
• Support certification, accreditation, IATT, and ATO activities.
• Collaborate with developers, system administrators, database administrators, and testers to ensure security is integrated throughout the development lifecycle.
• Support security assessment events and remediation efforts.
• Develop, maintain, and manage security documentation including SSPs, POA&Ms, SAPs, and assessment artifacts.
• Utilize XACTA to manage RMF documentation and authorization activities.
• Implement and validate NIST 800-53 security controls.
• Apply Zero Trust principles to cloud-native and enterprise environments.
• Manage risk assessments, findings, mitigation strategies, and compliance tracking.
• Coordinate with ISSMs, ISSEs, System Owners, Security Control Assessors (SCAs), and Authorizing Officials (AOs).
• Support security monitoring and compliance reporting activities utilizing Splunk and related cybersecurity tools.

Required Qualifications

• Active TS/SCI with Active Polygraph.
• Security+ or equivalent DoD IAT Level II/III certification.
• 18 years of experience in Cybersecurity, Information Assurance, Security Engineering, Systems Engineering, or related field.
• Experience serving as an ISSO, ISSE, or similar cybersecurity role.
• Proficiency with XACTA and the Risk Management Framework (RMF).
• Experience managing IATT and ATO processes.
• Proficiency with Splunk.
• Experience conducting architecture and security compliance assessments.
• Experience implementing and maintaining security documentation including:
  • System Security Plans (SSPs)
  • Security Assessment Plans (SAPs)
  • Plans of Action and Milestones (POA&Ms)
  • Security assessment artifacts
• Experience implementing security controls aligned with frameworks such as ICD 503 and NIST 800-53.
• Experience coordinating with ISSMs, ISSEs, System Owners, SCAs, and Authorizing Officials.
• Strong communication and stakeholder engagement skills.
• Experience supporting large-scale government cybersecurity programs.

Desired Qualifications

• Experience supporting cloud-native or DPaaS environments.
• Experience implementing Zero Trust architectures and security principles.
• Demonstrated experience leading cybersecurity initiatives across large enterprise programs.
• Prior experience managing or mentoring cybersecurity teams.
• Experience supporting intelligence community or classified environments.
• Strong understanding of identity, segmentation, flow control, and data protection architectures.
• Advanced knowledge of federal security authorization and continuous monitoring processes.

Education Requirements

• Bachelor's degree in Cybersecurity, Information Assurance, Computer Science, Information Systems, or related discipline.
• Bachelor's degree may substitute for 4 years of experience.
• Master's degree may substitute for 6 years of experience.

Certifications Required

• Security+ (or equivalent DoD 8570/8140 IAT II/IAT III certification) in active status.

Clearance

• Active TS/SCI with Active Polygraph.

Salary $125,000- 200,000

Work Location

• Annapolis Junction, MD
• Washington, DC
• Reston, VA

Physical & Work Environment Requirements

• Employees must be able to perform the essential functions of this position, with or without accommodation.
• Ability to remain stationary for extended periods while working at a computer.
• Frequently operate standard office equipment, including computers and telephones.
• Ability to communicate effectively in person, by telephone, video conference, and email.
• Occasionally move about the office and lift up to 20 pounds.
• Ability to work the assigned schedule with regular and reliable attendance.
• Ability to travel up to 10% as required.

Salary Description

125,000- 200,000