Information Systems Security Officer (ISSO)

Job Overview Systems Planning and Analysis, Inc. (SPA) is dedicated to delivering high‑impact technical solutions for national security. The Space Systems Group within SPA’s Space and Intelligence Division supports the United States Space Force (USSF) and other federal entities with enterprise architecture, systems engineering, testing, acquisition support, and cybersecurity. Responsibilities This role supports the USSF by leading the Information Systems Security Officer (ISSO/ISSE) team to maintain the required security posture and develop security policies, procedures, plans, and documentation in line with NIST and other guidelines. Build, maintain, and track system cybersecurity baselines via eMASS or equivalent. Review, assess, create, and update enclave documentation for ISSM approval. Identify, collect, review, and maintain RMF required artifacts. Ensure accurate system documentation and configuration logs. Provide quarterly written evaluations on RMF compliance. Maintain cybersecurity data for systems registered in the ITIPS. Conduct and report annual FISMA security reviews, contingency test completion dates, and validation of cybersecurity control compliance. Conduct annual control validations for all NC3 systems and for non‑NC3 systems per SMC/ECP policies. Create and maintain mission common control packages and provide the common control provider for each mission system. Create and maintain Authority‑to‑Connect (ATC) guest system packages in eMASS for non‑USSF systems. Execute required cybersecurity activities during the O&S phase per relevant laws and regulations. Improve critical infrastructure cybersecurity and resilience per DoD, NIST, and other guidance. Participate in IPTs, sustainment contractor meetings, change‑control boards, and working groups to align cybersecurity requirements. Evaluate system change sources and update RMF artifacts accordingly. Review and provide inputs on modification packages, program documents, and support agreements. Review system test plans and results; observe testing where necessary. Document findings and perform security impact analysis. Monitor A&A schedule deadlines. Provide annual updates to program cybersecurity policies and plans. Review and advise on RMF‑related agreements. Assist with vulnerability management and risk assessment. Review ACAS and SCC reports quarterly and characterize risk semi‑annually. Provide monthly reporting on team status and performance reviews. Represent team concerns to the customer. Qualifications Required Active DoD TOP SECRET clearance with SCI eligibility. Bachelor’s degree and 4–6 years of experience in IT/RMF/GRC and leadership; master’s degree equivalently 4 years of experience. Meets DoD 8140 Cybersecurity Analyst Mid‑Level education, training, or certification qualifications (e.g., CySA, Sec+). Reporting location in Colorado Springs; full‑time status as required by the customer. Preferred Experience with ITIPS. Experience with eMASS. Experience with FISMA. Experience with IASE. Experience with Xacta. Compensation & Benefits Competitive base pay and variable compensation opportunities. Eligible employees may enroll in benefit programs including health insurance, flexible spending accounts, health savings accounts, retirement plans, life and disability insurance, and paid/unpaid time‑off programs. Salary range: $85,000–$110,000. #J-18808-Ljbffr