Information Systems Security Officer (ISSO)

Job Title

Work experience:

4+ years of general full‐time work experience.

2+ years of directly related ISSO or cybersecurity experience.

1+ year of experience in a management or leadership role (team lead, technical lead, or similar).

Key responsibilities:

Support system authorization, continuous monitoring, and compliance activities for classified (SAP) environments, ensuring adherence to DoD security requirements and risk management frameworks.

Perform verified risk assessments for all security controls, aligned with Joint SAP Implementation Guide (JSIG) methodologies.

Develop and maintain artifacts for Control Validation Tests (CVTs) to confirm compliance with Authorizations to Operate (ATOs) for SAP packages.

Monitor and assist with the implementation of required security controls across systems and environments.

Conduct hands‐on audits of Windows and Linux systems and interpret and apply Security Technical Implementation Guides (STIGs).

Monitor and validate patch management activities and endpoint security controls.

Manage and monitor Plans of Action and Milestones (POA&Ms), ensuring timely remediation and tracking.

Develop security metrics and reporting artifacts for stakeholders, including leadership and compliance teams.

Required skills and knowledge:

Strong experience as an Information System Security Officer (ISSO) or in a similar cybersecurity / security compliance role.

Proficiency working with Windows and Linux operating systems.

Experience using SolarWinds Security Event Manager (SEM) or similar SIEM/logging tools.

Demonstrated experience performing security assessments, audits, and STIG compliance work.

Familiarity with DoD security policies, SAP, ATO processes, and risk‐management frameworks.

Experience supporting environments with 10% travel requirements.