ISSO Jobs

Senior Information Systems Security Officer (ISSO)

Location: Huntsville, AL

Employment Type: Direct Hire or Contract

Clearance Required: Active Top Secret Eligible / Ability to Maintain Required Access

$125,000 - $155,000

Position Overview

We are seeking a Senior Information Systems Security Officer (ISSO) to support mission-critical federal and defense systems within a highly secure environment. This individual will serve as the principal cybersecurity advisor to system owners, business stakeholders, and information security leadership, ensuring systems maintain compliance with federal cybersecurity requirements while supporting operational mission objectives. The ideal candidate has extensive experience supporting Risk Management Framework (RMF) activities, Authorization to Operate (ATO) processes, cybersecurity compliance efforts, vulnerability management, and continuous monitoring programs within complex government environments.

Key Responsibilities

• Serve as the primary cybersecurity advisor to the Information System Owner (ISO), Business Process Owner, ISSM, and cybersecurity leadership
• Ensure implementation, maintenance, and effectiveness of security controls throughout the system lifecycle
• Apply RMF principles and oversee compliance activities supporting authorization and accreditation requirements
• Guide systems through the Authority to Operate (ATO) lifecycle, including documentation development, review, submission, and maintenance
• Develop, review, maintain, and update cybersecurity documentation including: System Security Plans (SSPs) Contingency Plans Security Assessment documentation Policies and procedures Supporting authorization artifacts Create, update, and manage Plans of Action & Milestones (POA&Ms) based on vulnerability and compliance findings Conduct security control reviews and validate compliance with applicable federal and organizational requirements Perform and support network self-inspections, security reviews, and compliance assessments Track remediation activities and coordinate corrective actions for identified vulnerabilities and deficiencies Monitor security posture through continuous monitoring activities and vulnerability management processes Coordinate with engineers, system administrators, developers, and security teams to ensure security requirements are properly implemented Evaluate cybersecurity risks and provide recommendations to reduce operational and security exposure Prepare compliance reports, risk assessments, status updates, and executive-level briefings Support audits, inspections, security assessments, and external reviews Provide guidance regarding security architecture, operational security requirements, and system hardening activities Assist with developing and maintaining contingency planning and disaster recovery documentation

Required Qualifications

Bachelor's Degree in Information Assurance, Cybersecurity, Information Technology, Computer Science, Engineering, or a related field

10+ years of cybersecurity, information assurance, ISSO, RMF, or compliance experience

Experience serving as an ISSO, Information Assurance professional, or cybersecurity compliance lead

Strong knowledge of Risk Management Framework (RMF)

Experience supporting Authority to Operate (ATO) activities and security authorization processes

Experience developing and maintaining SSPs, POA&Ms, security assessment documentation, and compliance artifacts

Knowledge of NIST 800-53 security controls and federal cybersecurity requirements

Experience conducting vulnerability assessments and coordinating remediation efforts

Familiarity with Security Test & Evaluation (ST&E) activities

Strong understanding of cybersecurity governance, risk management, and compliance principles

Experience supporting continuous monitoring programs and audit readiness initiatives

Excellent written, verbal, organizational, and interpersonal communication skills

Ability to work independently and provide guidance to technical and non-technical stakeholders

Preferred Qualifications

Experience using Xacta or similar GRC platforms

Experience using eMASS or other federal compliance management systems

Experience supporting DoD, Intelligence Community, or other federal environments

Experience supporting classified systems and secure operational environments

Experience with vulnerability management tools and compliance reporting solutions

Experience performing security control assessments and risk analysis activities

Familiarity with incident response, auditing, and cybersecurity operations

Knowledge of DISA STIGs, NIST standards, and federal security policies

One or more of the following certifications preferred: CISSP CompTIA Security+ CASP+ CISM CAP SecurityX Other DoD 8570/8140 compliant cybersecurity certifications

Desired Skills

RMF ATO Xacta eMASS NIST 800-53 SSP Development POA&M Management Vulnerability Management ACAS Nessus STIG Compliance Security Assessments Continuous Monitoring Risk Analysis Audit Readiness Information Assurance Cybersecurity Governance Compliance Management

What You'll Bring

Strong cybersecurity leadership within complex environments

Ability to balance security requirements with mission objectives

Experience guiding systems through accreditation and compliance processes

Strong documentation and communication skills

Ability to collaborate effectively with system owners, engineers, security personnel, and executive leadership

Commitment to maintaining secure, compliant, and resilient information systems supporting critical operations