Information Systems Security Officer (ISSO)

Position Overview

The Information Systems Security Officer (ISSO) is responsible for ensuring that all IT systems remain compliant with applicable cybersecurity policies, regulations, and standards. This role manages the full lifecycle of system authorizations, risk assessments, and security controls, providing direct support to system owners and IT teams to maintain security accreditation.

Key Responsibilities

• Manage the Risk Management Framework (RMF) process for assigned systems, including security control implementation, assessment, and continuous monitoring.
• Maintain and update security documentation, including System Security Plans (SSP), Plans of Action and Milestones (POA&M), and incident response procedures.
• Coordinate and conduct security assessments, vulnerability scans, and compliance reviews.
• Serve as the primary liaison between cybersecurity personnel, system administrators, and program management regarding system security matters.
• Enforce organizational security policies and procedures in line with DoD and federal requirements.
• Support incident response activities, including investigation, reporting, and remediation.

Requirements

Required Qualifications

Certifications

Security Requirements

Benefits