TS/SCI ISSO — DoD Cybersecurity Lead

Maximus; Northern (KY); Hybrid; USD 90,000 - 140,000; Full time

Job summary

Maximus is seeking an Information Systems Security Officer (ISSO) in Arlington, VA, to secure and manage the organization's DoD/COTS information systems. You will implement policies, conduct security audits, and ensure compliance with JSIG, RMF, and NIST standards.

The role requires TS/SCI clearance, a technical degree, and 8+ years in cybersecurity with DoD/IC experience. You will work across teams to maintain CUI/PII protections, manage eMASS and STIGs, and lead vulnerability remediation.

Qualifications

• Active TS/SCI clearance required at hire, eligible for CI poly after hire.
• Bachelor's degree in a technical field; 8 years of cybersecurity experience may substitute.
• 8+ years in cybersecurity with DoD/IC experience.
• Strong knowledge of RMF, NIST, FIPS 199/200, and FedRAMP.
• Experience with RMF-based security controls and DoD STIGs.
• Ability to work independently and collaboratively.

Responsibilities

• Verify data security access controls per JSIG guidelines.
• Monitor and enforce media control and data protection procedures.
• Manage eMASS configuration and DoD STIG compliance.
• Produce POA&M and vulnerability risk analyses.
• Develop security programs and coordinate with stakeholders.

Skills

TS/SCI Clearance

RMF / NIST / FISMA

Cybersecurity governance

Team player

Quick learner

Education

Bachelor's degree in Computer Science, Information Systems, Engineering, or related technical discipline

Security+ or DoD 8570 equivalent

Tools

Splunk

eMASS

ACAS

JSIG guidance

Job description

Maximus is seeking an Information Systems Security Officer (ISSO) in Arlington, VA, to secure and manage the organization's DoD/COTS information systems. You will implement policies, conduct security audits, and ensure compliance with JSIG, RMF, and NIST standards.

The role requires TS/SCI clearance, a technical degree, and 8+ years in cybersecurity with DoD/IC experience. You will work across teams to maintain CUI/PII protections, manage eMASS and STIGs, and lead vulnerability remediation.