Senior ISSO: Security Accreditation & Risk Mitigation Lead

MANTECH; Washington (District of Columbia); On-site; USD 120,000 - 160,000; Full time

Job summary

MANTECH seeks a Senior Information Systems Security Officer (ISSO) to join our team in Washington, D.C. This on-site role oversees security configurations, accreditation processes, and vulnerability management to protect critical information systems.

The successful candidate will manage BOE documentation, coordinate with system owners, and lead remediation through POAMs while maintaining strict security postures and incident readiness.

Qualifications

• 10+ years of related information systems security experience or a Master’s degree with 7+ years of experience
• Bachelor's Degree or equivalent (6 additional years of experience)
• Must possess one or more relevant industry certifications: CISSP, CISSP-ISSMP, CISM, FITSP-M, GCIA, GCIH, GICSP, GSLC
• Significant experience navigating technical accreditation processes and creating BOE documentation
• Familiarity with Nessus, Security Center, Guardium, WebInspect, and NMAP

Responsibilities

• Create, update, maintain, and interpret required BOE documentation for accreditation processes
• Ensure day-to-day implementation, oversight, and maintenance of system security configurations
• Conduct vulnerability scans and perform vulnerability analysis
• Develop and track POAMs to mitigate security risks
• Coordinate with system owners, ISSMs, and teams to diagnose issues and implement solutions
• Document plans detailing security postures, configurations, and secure remote access for applications

Skills

Security governance

Vulnerability management

BOE documentation

Stakeholder coordination

Network security

Education

Bachelor's degree or equivalent

Master's degree with 7+ years experience

Tools

Tenable Nessus

IBM Guardium

HP WebInspect

NMAP

Security Center

Job description

MANTECH seeks a Senior Information Systems Security Officer (ISSO) to join our team in Washington, D.C. This on-site role oversees security configurations, accreditation processes, and vulnerability management to protect critical information systems.

The successful candidate will manage BOE documentation, coordinate with system owners, and lead remediation through POAMs while maintaining strict security postures and incident readiness.