Information Systems Security Officer (ISSO)

Information Systems Security Officer (ISSO)The IncLab engineers and delivers intelligent digital applications and platforms that revolutionize how our customers and mission-critical teams achieve success.We are where innovation meets purpose; and where your career can meet purpose as well. We are looking for an Information Systems Security Officer (ISSO). If you are organized, detailed oriented and like working in a collaborative team environment to make an impact, we encourage you to apply and take the first step in joining our dynamic and impactful company.As an ISSO, you will maintain the security posture of assigned systems and support Risk Management Framework (RMF) activities across the system life cycle. The ISSO partners with system owners, security leadership, assessors, administrators, and mission stakeholders to manage authorization documentation, monitor compliance, track vulnerabilities, and ensure systems operate within approved risk parameters.What will you do?Maintain the operational security posture of assigned information systems in coordination with system owners, ISSM/CISO, administrators, and authorization stakeholders.Support RMF activities, including control implementation, assessment support, authorization package development, continuous monitoring, and ongoing authorization.Develop and maintain security artifacts, including SSPs, SARs, POA&Ms, risk assessments, continuous monitoring evidence, and supporting procedures.Coordinate security control implementation with engineering, infrastructure, cloud, application, and operations teams throughout the system life cycle.Conduct or support audit log reviews, vulnerability scans, configuration reviews, internal assessments, and compliance monitoring.Track, validate, and report remediation of vulnerabilities, findings, control deficiencies, POA&M items, and risk acceptance decisions.Assess the security impact of system changes, software, cloud services, interconnections, and configuration updates.Support security event review, incident response coordination, escalation, reporting, and lessons learned.Prepare cybersecurity status updates, metrics, briefings, and compliance reports for leadership, customers, auditors, and assessors.