Information Systems Security Officer (ISSO)

Description:

We are seeking a Senior Information Systems Security Officer (ISSO) to support a Department of Defense cybersecurity mission at Pope Army Airfield, NC. The ISSO will lead Risk Management Framework (RMF) activities supporting C2ISR information systems and networks, ensuring secure system authorization, compliance, and continuous monitoring across mission-critical infrastructure. This role will work closely with cybersecurity architects, system engineers, and authorizing officials to ensure systems meet DoD RMF, NIST, and cybersecurity compliance requirements. Responsibilities Lead Risk Management Framework (RMF) implementation for complex DoD information systems. Develop and maintain Security Authorization Packages including SSPs, SARs, and POA&Ms. Support the authorization process including IATTs, ATOs, and ATCs. Integrate RMF requirements into system engineering and acquisition lifecycles. Conduct security control assessments and compliance validation. Maintain continuous monitoring programs in accordance with

NIST 800-137.

Coordinate cybersecurity activities with system engineers, architects, and Authorizing Officials. Support Cyber Operational Readiness Assessments (CORA), IG inspections, and compliance audits. Perform STIG assessments and remediation activities. Assist with gap analysis and security baseline development. Maintain governance documentation including security classification and information disclosure guidance. Mentor junior ISSOs and support consistent RMF documentation practices. Technologies & Tools RMF & Compliance Platforms eMASS Xacta Archer GRC Security Assessment & Monitoring

DISA STIG

Viewer SCAP compliance scanners Splunk Elastic ArcSight Vulnerability Management Nessus Qualys OpenVAS Security & Infrastructure Tools ServiceNow Jira Service Desk PKI certificate management TACLANE encryption devices

Requirements:

Required Qualifications Active TS/SCI clearance Experience supporting DoD RMF accreditation processes Experience developing ATO packages and security documentation Familiarity with

NIST SP 800-53, NIST SP

800-37, and DoD RMF Experience supporting continuous monitoring and security compliance programs Certification Requirement Candidates must meet DoD 8140 requirements and obtain a DoD-approved IA baseline certification for

ADP-III / IT-III

based on the IAT level and CE/Operating System certification within six (6) months of assignment.