Lead Senior Information Systems Security Officer (ISSO)

Job Description

Job Description

Dynamic Solutions Technology, LLC , a premier strategic services firm that meets IT and Service needs for commercial and government clients, is seeking a full-time Lead Senior Information Systems Security Officer (ISSO)  to support the government customer located in Washington, DC . This is an exempt hybrid remote position. (A minimum of TWO days per week reporting to site; additional support as needed on a case-by-case basis)

MUST BE A U.S. CITIZEN

Responsibilities:

• Serve as the Contractor's senior ISSO and primary point of accountability for the technical execution, coordination, and oversight of information system security activities supporting assigned Federal systems.
• Act as the primary technical interface between the Contractor and Government stakeholders, including the Information System Security Manager (ISSM), Chief Information Security Officer (CISO), Authorizing Official/Authorizing Official Designated Representative (AO/AODR), and System Owners.
• Lead, coordinate, and oversee all Contractor ISSO activities to ensure consistent, compliant, and effective cybersecurity execution across supported information systems.
• Direct the development, review, maintenance, and submission of Risk Management Framework (RMF) and authorization-package artifacts, ensuring documentation is accurate, complete, current, and compliant with applicable Federal cybersecurity requirements.
• Lead cybersecurity authorization activities, including system categorization, security control implementation, assessment support, Plan of Action and Milestones (POA&M) management, security documentation, and authorization activities.
• Conduct internal quality assurance reviews of ISSO deliverables and authorization artifacts prior to Government submission to ensure technical accuracy, completeness, and compliance with contract and Government requirements.
• Manage cybersecurity risk and issue registers; identify, assess, document, track, and escalate security risks, vulnerabilities, deficiencies, and compliance issues to appropriate Contractor and Government leadership.
• Lead and support Continuous Monitoring (ConMon), vulnerability management, security control assessment, audit support, cybersecurity inspections, and other RMF-related workstreams as assigned.
• Participate in Government governance forums, technical reviews, cybersecurity working groups, and program meetings while representing the Contractor's technical interests and providing expert cybersecurity guidance.
• Maintain hands-on technical cybersecurity expertise and actively perform senior ISSO functions; provide technical leadership rather than functioning solely in an administrative or managerial capacity.
• Monitor system security posture and coordinate with system owners, cybersecurity personnel, system administrators, and technical teams to identify and resolve security deficiencies and maintain operational compliance.
• Utilize and maintain proficiency with cybersecurity and information technology platforms, including CSAM, ServiceNow, Splunk, Tenable/Nessus, Qualys, Microsoft Defender, Microsoft Intune, BigFix, Microsoft Azure, Microsoft 365, Microsoft Entra ID, Okta, Palo Alto Panorama, and Zscaler .
• Analyze security monitoring, vulnerability, configuration, and compliance data to support risk-based decision-making, incident response coordination, continuous monitoring, and overall system security posture management.
• Coordinate with the Contractor's Program Manager on contract-level requirements, including staffing, reporting, deliverable status, invoicing support, workload planning, and resolution of programmatic issues affecting cybersecurity execution.
• Provide technical leadership, mentoring, and knowledge transfer to ISSO and cybersecurity personnel while maintaining required qualifications, certifications, and technical proficiency throughout the period of performance.

Education, Certifications, and Experience:

• Bachelor's degree from an accredited institution in Cybersecurity, Information Assurance, Information Technology, Computer Science, Information Systems, or a related technical discipline. A Master's degree in a related field is preferred.
• CISSP or another cybersecurity certification meeting the applicable DoD 8140/8570 IAT III/IAM III requirements is required.
• Preferred certifications include CISM, CASP+, CCSP, CAP, or GIAC security certifications .
• Personnel shall maintain all required certifications and professional qualifications throughout the period of performance.
• Minimum of 8 years of progressively responsible experience in information systems security, cybersecurity, information assurance, or a related discipline , including at least 5 years supporting Federal Government or Department of Defense information systems .
• Minimum of 5 years of hands-on experience supporting the Risk Management Framework (RMF) , including security control implementation, assessment, authorization, continuous monitoring, POA&M management, and security documentation.
• Demonstrated experience developing, reviewing, maintaining, and submitting System Security Plans (SSPs), Security Assessment Reports (SARs), Plans of Action and Milestones (POA&Ms), risk assessments, security control documentation, and other authorization-package artifacts .
• Demonstrated experience supporting Authority to Operate (ATO) and authorization activities and working directly with ISSMs, CISOs, Authorizing Officials, System Owners, and other Government cybersecurity stakeholders.
• Experience leading Continuous Monitoring (ConMon), vulnerability management, security assessments, audits, inspections, and cybersecurity remediation activities .
• Demonstrated ability to lead and mentor cybersecurity/ISSO personnel while maintaining hands-on technical responsibilities.
• Experience with Federal cybersecurity standards and frameworks, including NIST SP 800-53, NIST RMF, FISMA , and applicable Federal and DoD cybersecurity policies.
• Working knowledge of enterprise cybersecurity technologies and platforms, including CSAM, Splunk, ServiceNow, Tenable/Nessus or Qualys, Microsoft Defender, Microsoft Intune, BigFix, Microsoft Azure, Microsoft 365, Microsoft Entra ID, Okta, Palo Alto Panorama, and Zscaler , with specific tools subject to task-order requirements.