Information System Security Officer (ISSO)

Job Description

Job Description

Salary : Position Overview

The Information System Security Officer (ISSO) ensures the TIBI application remains fully compliant with DoD cybersecurity requirements, supporting Risk Management Framework (RMF) activities, continuous monitoring, and Authority to Operate (ATO) sustainment. The ISSO plays a critical role under PWS Section 6.3 for security assessment, authorization, and continuous monitoring.

Key Responsibilities

• Serve as the primary cybersecurity authority for TIBI, ensuring compliance with DoDI 8500.01, 8510.01 (RMF), NIST SP 800-53, and related DoD policies.
• Manage and update RMF artifacts within eMASS and ensure timely submission of POA&Ms, SSPs, and ATO documentation.
• Conduct vulnerability assessments, static / dynamic scans, and continuous monitoring using CMRS, ACAS, and Fortify tools.
• Support audit readiness, FISMA reporting, and coordination with the ISSM and Cybersecurity Leads.
• Prepare and maintain security documentation, including System Security Plans (SSP), Risk Assessments, and Contingency Plans.
• Participate in configuration management and change control boards to ensure security posture is maintained.
• Advise program leadership on emerging cybersecurity risks and mitigation strategies.

Qualifications and Experience

Required Skills

Certification Requirement

Clearance Requirement

Salary Range