Information Systems Security Officer

Job DescriptionJob DescriptionTitle: Information Systems Security Officer (ISSO) Location: Annapolis Junction, MD Type: Direct Hire Compensation: $200,000/year (salary) Schedule: 40 hours/week Clearance Required: Active TS/SCI with FSP Role OverviewWe’re hiring an Information Systems Security Officer (ISSO) to support mission-critical, classified environments. In this role, you’ll help ensure information systems stay compliant throughout the Risk Management Framework (RMF) lifecycle—supporting ATO packages, continuous monitoring, assessments, and audit readiness. You’ll partner closely with technical teams and security stakeholders to drive secure, compliant system operations.What You’ll Do (Key Responsibilities)Support the full RMF lifecycle for classified information systems Build and maintain security authorization packages and RMF documentation Coordinate and support Authority to Operate (ATO) efforts Perform/control security assessments, compliance reviews, and control validation Track vulnerabilities, findings, and remediation activities (POA&Ms, etc.) Support Continuous Monitoring (ConMon) and ongoing security activities Review scan results/configurations to ensure alignment with security requirements Work with system teams to implement/maintain required security controls Participate in audits, inspections, and cybersecurity compliance reviews Provide risk-based recommendations to improve security posture Required Qualifications (Must-Haves)Active TS/SCI with PolygraphExperience in ISSO / Information Assurance / cybersecurity compliance in classified environments Strong knowledge of RMF and the security authorization process (ATO) Familiarity with: NIST SP 800-53 (Rev 3 and/or Rev 5)NIST SP 800-37Experience with compliance/configuration scanning and assessment workflows Strong communication skills (written + verbal) and comfort working cross-functionally Tools/Platforms (Experience With)Experience with RMF/cyber compliance tools such as:XACTALATTE / ARTBISCOTTIWATCHCATSTE (Experience with similar tools is also valuable.) Documentation You Should Be Comfortable WithHands-on experience developing/reviewing security documentation such as:SSP, POA&M, SAR, RARCMP, CP, BIASPFs / exceptions and related artifacts AARs and audit support documentation Preferred / Nice-to-HavePrior support of classified government systemsExperience partnering with ISSMs, System Owners, Security Control Assessors, and Authorizing OfficialsFamiliarity with vulnerability remediation and system administration security concepts Certifications like Security+, CISSP, CAP, CASP+, or CISMSystem One, and its subsidiaries including Joulé and Mountain Ltd., are leaders in delivering outsourced services and workforce solutions across North America. We help clients get work done more efficiently and economically, without compromising quality. System One not only serves as a valued partner for our clients, but we offer eligible employees health and welfare benefits coverage options including medical, dental, vision, spending accounts, life insurance, voluntary plans, as well as participation in a 401(k) plan.System One is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, age, national origin, disability, family care or medical leave status, genetic information, veteran status, marital status, or any other characteristic protected by applicable federal, state, or local law.#M-1 #LI- Ref: #851-Rockville-S1