Information System Security Officer (ISSO)

This position is listed on behalf of a partner company, which manages all applications and next steps. Our partner is looking for an Information System Security Officer (ISSO) based in the United States. Join a mission-driven cybersecurity team dedicated to protecting critical Department of Defense (DoD) information systems and enabling secure, reliable enterprise IT operations. As an Information System Security Officer, you will oversee information system security compliance, risk management, continuous monitoring, and authorization documentation across classified environments. You will work closely with system owners, security leadership, and government stakeholders to implement security policies, mitigate vulnerabilities, and maintain operational readiness. Your expertise will support compliance with DoD security frameworks, NIST standards, and Department of the Air Force continuous monitoring requirements. This role combines hands-on cybersecurity oversight, technical problem-solving, and collaboration across enterprise IT service delivery and security operations. Working remotely within the United States, you will contribute to high-impact national security missions while helping teams maintain strong security practices throughout the system lifecycle. Accountabilities - Information system security oversight: Ensure that information systems comply with established security policies, operational procedures, and applicable organizational requirements. Verify that access requirements are met and that signed Acceptable Use Agreements are maintained. - Security policies and procedures: Assist in developing, reviewing, distributing, and maintaining information assurance policies, implementation plans, technical guidance, and standard operating procedures.

Ensure documentation addresses applicable NIST SP 800-53 Revision 5 security control families. - Risk management and authorization: Support the development, maintenance, and review of system certification, accreditation, assessment, and authorization documentation in accordance with the DoD Risk Management Framework (RMF) or applicable DIACAP requirements. - Continuous monitoring and assessments: Conduct continuous monitoring activities aligned with the Department of the Air Force's continuous authorization methodology and support the Continuous Monitoring and Risk Assessment (CORA) process, including security assessments, risk identification, documentation, and mitigation tracking. - Vulnerability management: Review security bulletins and advisories, including those from relevant response teams and the Defense Information Systems Agency (DISA). Track Information Assurance Vulnerability Alerts (IAVAs), report implementation status, and help ensure vulnerabilities are addressed within required timeframes. - Configuration management and change control: Ensure that procedures governing hardware, software, and firmware changes comply with configuration management policies. Coordinate proposed modifications with the appropriate security personnel and approval authorities before implementation. - Security incident response: Identify, investigate, document, and report security incidents and policy violations to the Information System Security Manager (ISSM), Information Assurance Manager, Security Incident Response Team, and relevant management personnel. Initiate approved protective and corrective measures when incidents or vulnerabilities are discovered. - Security controls and data protection: Evaluate security requirements related to confidentiality, integrity, and availability, ensuring appropriate protection levels and safeguards are maintained across assigned systems. - System lifecycle security: Ensure security requirements are incorporated throughout every phase of the information system lifecycle and that current security documentation remains accessible to authorized personnel.