Information System Security Officer

#restonfed Kforce has a client that is seeking an Information System Security Officer in Huntsville, AL. Summary: Are you a cybersecurity professional with experience supporting system security, compliance, and accreditation efforts? We're seeking an Information Systems Security Officer (ISSO) to help safeguard critical information systems through security oversight, risk management, and compliance activities across the system lifecycle. In this role, you will serve as a trusted security advisor, ensuring the implementation and maintenance of security controls while supporting accreditation and continuous monitoring initiatives. What You'll Do:

• Serve as the primary security advisor to system owners, business stakeholders, and cybersecurity leadership on all information system security matters
• Oversee the implementation, maintenance, and continuous monitoring of security controls, configurations, and procedures
• Support Authority to Operate (ATO) efforts, including development, review, and maintenance of accreditation and certification documentation
• Create and maintain key security artifacts, including System Security Plans (SSPs), contingency plans, and related compliance documentation
• Conduct security assessments and self-inspections to evaluate compliance and identify areas for improvement
• Develop and manage Plans of Action & Milestones (POA&Ms) based on vulnerability findings and remediation activities
• Coordinate with technical teams and stakeholders to address security risks and ensure regulatory compliance
• Provide recommendations to leadership regarding security posture improvements, risk mitigation strategies, and process enhancements
• Bachelor's degree in a related field
• Current CISSP, CompTIA Security+, or equivalent cybersecurity certification
• Experience implementing, maintaining, and overseeing security configurations, controls, and procedures for information systems
• Experience supporting system accreditation, compliance, or cybersecurity governance initiatives
• Experience with Xacta or similar governance, risk, and compliance (GRC) tools
• Strong written and verbal communication skills
• Excellent interpersonal, organizational, and problem-solving abilities

• Experience supporting Authority to Operate (ATO) processes and cybersecurity compliance frameworks
• Experience developing System Security Plans, Contingency Plans, POA&Ms, and related security documentation
• Experience facilitating collaboration among system owners, technical teams, and senior leadership
• Knowledge of vulnerability management, security control assessments, and continuous monitoring practices
• Familiarity with enterprise cybersecurity governance and risk management processes