CrawlJobs Logo

Information System Security Officer (ISSO)

https://www.roberthalf.com Logo

Robert Half

Location Icon

Location:
United States , Costa Mesa

Category Icon

Job Type Icon

Contract Type:
Not provided

Salary Icon

Salary:

Not provided

Job Description:

We are seeking a cleared Information System Security Officer (ISSO) to support classified systems operating within the DoD Risk Management Framework (RMF) and JSIG environments. This role is highly documentation‑focused and centered on ATO support, continuous monitoring, audit readiness, and compliance across multiple classified networks. The ISSO will primarily support the ISSM and may assume ownership of smaller ATO efforts based on workload and system scope. This role will be a 3–6-month contract to hire opportunity!

Job Responsibility:

  • Serve as the ISSO for multiple classified systems, supporting RMF lifecycle activities under ISSM direction
  • Create, update, and submit security authorization artifacts for: New hardware and software extensions
  • RMF updates and control changes
  • Support and maintain ATO packages, including initial authorizations, renewals, and extensions
  • Monitor and assess 3–5 classified networks, averaging ~1 hour per network for compliance and security reviews
  • Execute and document continuous monitoring activities using approved security tools
  • Participate in and support routine audits, inspections, and DoD compliance submissions
  • Partner with IT and engineering teams to ensure controls, scans, and audit activities are executed correctly
  • Conduct vulnerability scanning on a recurring schedule
  • Support systems currently partially complete within the NIST RMF lifecycle
  • Participate in regular stakeholder syncs with ISSM, IT, security teams, and government representatives
  • Operate within a classified, air-gapped environment supporting a mixed operating system infrastructure

Requirements:

  • Active TS/SAP clearance
  • Candidates with frequent international travel or foreign relationships may experience delays during SAP read-on
  • Strong working knowledge of: JSIG
  • NIST RMF processes
  • Hands-on experience with: Security audits
  • Vulnerability scanning
  • Security tools used in continuous monitoring
  • ATO experience
  • Experience supporting ATO packages required
  • Some level of ATO ownership acceptable
  • Must be able to execute independently without significant coaching
  • Strong documentation skills with a high attention to detail
What we offer:
  • medical, vision, dental, and life and disability insurance
  • 401(k) plan

Additional Information:

Job Posted:
May 04, 2026

Job Link Share:

Looking for more opportunities? Search for other job offers that match your skills and interests.

Briefcase Icon

Similar Jobs for Information System Security Officer (ISSO)

Junior Information System Security Officer

Come join our growing team and make a difference every day! AnaVation is seeking...
Location
Location
United States , Washington, DC
Salary
Salary:
Not provided
anavationllc.com Logo
AnaVation
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • Bachelor’s degree in Cybersecurity, Information Technology, or a related field
  • In lieu of a degree, a minimum of two (2) years of hands-on relevant experience is required
  • Minimum two (2) years of hands-on experience in Governance Risk and Compliance and the RMF process
  • Proficient with Federal policies, program standards, and NIST Special Publications guidelines to include but not limited to such as NIST SP 800-53, 800-37, 800-137
  • Experience supporting system security documentation, control assessments, and ATO or ATT packages for low to moderate-impact systems
  • Proficient on how to use various security tools, such as but not limited to: JCAM (or an equivalent GRC tool), Tenable, BigFix, and Splunk (or SIEM), and/or equivalent
  • Familiarity with tools such as JCAM and common security documentation templates
  • Exposure to POA&M tracking, audit support, and vulnerability scanning processes
  • Ability to draft and maintain basic cybersecurity documentation (e.g., SSP, CMP, IRP)
  • Detail-oriented with solid organizational and documentation skills
Job Responsibility
Job Responsibility
  • Support the development and maintenance of ATO/ATT documentation for low to moderate-impact systems
  • Assist with system security assessments and control evaluations under the Risk Management Framework (RMF)
  • Maintain security artifacts and documentation in JCAM
  • Conduct biweekly reviews of system logs and vulnerability scan results
  • Track and manage POA&Ms in coordination with senior ISSOs and system owners
  • Participate in continuous monitoring, training exercises, and contingency planning events
  • Ensure compliance with cybersecurity policies and NIST SP 800-53 control
What we offer
What we offer
  • Generous cost sharing for medical insurance for the employee and dependents
  • 100% company paid dental insurance for employees and dependents
  • 100% company paid long-term and short term disability insurance
  • 100% company paid vision insurance for employees and dependents
  • 401k plan with generous match and 100% immediate vesting
  • Competitive Pay
  • Generous paid leave and holiday package
  • Tuition and training reimbursement
  • Life and AD&D Insurance
  • Fulltime
Read More
Arrow Right

Mid-Level Information System Security Officer

Come join our growing team and make a difference every day! AnaVation is seeking...
Location
Location
United States , Washington, DC
Salary
Salary:
Not provided
anavationllc.com Logo
AnaVation
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • Bachelor’s degree in Cybersecurity, Information Technology, or a related field
  • Minimum of four (4) years of hands-on experience in cybersecurity
  • Knowledge of Governance Risk and Compliance with at least one (1) year maintaining an Authorization to Operate (ATO) for a moderate or high-impact federal information system
  • Strong working knowledge with Federal policies, program standards, and NIST Special Publications guidelines
  • Experience drafting, reviewing, and maintaining system security documentation
  • Proficient in using various security tools
  • Strong communication, written, and presentation skills
  • Provide support and mentorship for Tier I ISSOs
  • Familiarity with vulnerability scanning tools and interpreting results
  • Must possess at least one of the following certifications: CISSP, CISM, CGRC, CRISC, ISSMP, CISA, CCSP, CEH, CompTIA Security+, PMP
Job Responsibility
Job Responsibility
  • Support the maintenance of security documentation and support system ATO and ATT efforts
  • Conduct security control assessments and provide recommendations for remediation
  • Perform biweekly audit log and vulnerability scan reviews and track POA&M items
  • Collaborate with system owners and technical teams to manage risk and respond to incident
  • Support Ongoing Authorization (OA) and continuous monitoring activities
  • Prepare and brief senior leadership on system security posture and compliance metric
  • Ensure alignment with DOJ cybersecurity policies and NIST SP 800-53, 800-37, and 800-137
What we offer
What we offer
  • Generous cost sharing for medical insurance for the employee and dependents
  • 100% company paid dental insurance for employees and dependents
  • 100% company paid long-term and short term disability insurance
  • 100% company paid vision insurance for employees and dependents
  • 401k plan with generous match and 100% immediate vesting
  • Competitive Pay
  • Generous paid leave and holiday package
  • Tuition and training reimbursement
  • Life and AD&D Insurance
  • Fulltime
Read More
Arrow Right

Senior Information System Security Officer

Come join our growing team and make a difference every day! AnaVation is seeking...
Location
Location
United States , Washington
Salary
Salary:
Not provided
anavationllc.com Logo
AnaVation
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • Bachelor’s degree in Cybersecurity, Information Technology, or a related field
  • Minimum of six (6) years of hands-on experience in cybersecurity and expert knowledge of Governance Risk and Compliance
  • At least three (3) years supporting and maintaining system authorizations for complex systems
  • Demonstrated expertise in the Risk Management Framework (RMF), NIST SP 800-53 Rev 5, and related federal cybersecurity policies
  • Extensive experience managing ATO/ATT processes, security control assessments, POA&M lifecycle, vulnerability management, and audit response
  • Strong leadership experience mentoring junior and mid-level ISSOs and interfacing with senior government leadership
  • Must possess at least two of the following active certifications: Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Certified Governance, Risk and Compliance (CGRC), Certified in Risk and Information Systems Control (CRISC), Information Systems Security Management Professional (ISSMP), Certified Information Systems Auditor (CISA), Certified Cloud Security Professional (CCSP), Certified Ethical Hacker (CEH), CompTIA Security+, Project Management Professional (PMP)
  • Proficiency in tools such as JCAM, Tenable Nessus, BigFix and Splunk
  • Ability to develop, review, and present high-level security documentation and briefings
  • Strong understanding of cloud platforms (IaaS, PaaS, SaaS), supply chain risk management, and incident response procedures
Job Responsibility
Job Responsibility
  • Support the maintenance of security documentation and support system ATO and ATT efforts
  • Conduct security control assessments and provide recommendations for remediation
  • Perform biweekly audit log and vulnerability scan reviews and track POA&M items
  • Collaborate with system owners and technical teams to manage risk and respond to incident
  • Support Ongoing Authorization (OA) and continuous monitoring activities
  • Prepare and brief senior leadership on system security posture and compliance metric
  • Ensure alignment with cybersecurity policies and NIST SP 800-53, 800-37, and 800-137
What we offer
What we offer
  • Generous cost sharing for medical insurance for the employee and dependents
  • 100% company paid dental insurance for employees and dependents
  • 100% company paid long-term and short term disability insurance
  • 100% company paid vision insurance for employees and dependents
  • 401k plan with generous match and 100% immediate vesting
  • Competitive Pay
  • Generous paid leave and holiday package
  • Tuition and training reimbursement
  • Life and AD&D Insurance
  • Fulltime
Read More
Arrow Right

Senior Information System Security Officer

We are seeking a highly skilled and mission-driven Senior Information Systems Se...
Location
Location
United States , Clarksburg
Salary
Salary:
Not provided
imts.us Logo
Innovative Management & Technology Services
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • Bachelor’s degree in Cybersecurity, Information Systems, Computer Science, or a related field (or equivalent combination of education and experience)
  • 8+ years of progressive experience in information systems security, with at least 3 years in a senior-level or lead ISSO role supporting federal or state government agencies
  • Strong working knowledge of: NIST 800-53, RMF, FISMA, OWASP Top 10, and SANS Institute standards
  • SAFe Agile environments and integrating security in Agile workflows
  • Networking, Linux/Windows system administration, and secure software development practices
  • Cloud platforms (AWS, Azure, GCP) and related security tools (e.g., AWS Security Hub, Azure Defender)
  • Experience in managing security documentation, participating in audits, and working with compliance frameworks
  • Relevant certifications such as CISSP, CISM, Security+, CEH, or equivalent
  • Active Top Secret clearance is required
  • U.S. Citizenship is required
Job Responsibility
Job Responsibility
  • Lead the implementation and maintenance of system security controls in compliance with federal cybersecurity frameworks, including NIST SP 800-53, RMF, OWASP, DISA STIGs, and Common Criteria
  • Oversee the full lifecycle of Authorization to Operate (ATO) processes, including preparation of System Security Plans (SSPs), Security Assessment Reports (SARs), POA&Ms, and risk assessments
  • Serve as a senior security advisor and liaison to system owners, developers, DevOps engineers, and government stakeholders
  • Participate in technical reviews of system architecture and ensure secure design of virtualized and software-defined infrastructures
  • Support integration of security controls into CI/CD pipelines using DevSecOps principles and tools (e.g., Jenkins, GitLab CI, SonarQube, Snyk)
  • Provide security engineering support for modern cloud environments, including AWS, Azure, or Google Cloud Platform, and assess cloud-native security capabilities
  • Conduct vulnerability assessments, interpret scan results from tools like Tenable, Nessus, Splunk, or Qualys, and lead remediation efforts
  • Mentor junior ISSOs and analysts on security policies, best practices, and tool usage
  • Ensure continuous monitoring activities are aligned with organizational risk tolerance and compliance goals
What we offer
What we offer
  • competitive compensation
  • excellent benefits including tuition reimbursement and employer-contributed 401K
  • referral bonuses
  • Fulltime
Read More
Arrow Right

Information Systems Security Officer Level 3

Provide support for a program, organization, system, or enclave's information as...
Location
Location
United States , Annapolis Junction
Salary
Salary:
Not provided
ctp-web.com Logo
Columbia Technology Partners
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • Ten (10) years of combined work-related experience in the fields of IT, cybersecurity or security authorization is required
  • Experience in at least two of the following areas is required: knowledge of current security tools, hardware/software security implementation
  • communication protocols
  • or encryption tools and techniques
  • Familiarity with commercial security products, security authorization techniques, security incident management, and PKI and authorization services
  • Bachelor's degree in Computer Science or a related field (e.g. General Engineering, Computer Engineering, Electrical Engineering, Systems Engineering, Mathematics, Computer Forensics, Cybersecurity, Information Technology, Information Assurance, Information Security, and Information Systems) is required
  • In lieu of a Bachelor's degree, four (4) additional years of work-related experience may be substituted
  • U.S. Citizenship is required for all applicants
  • All applicants and employees are subject to random drug testing in accordance with Executive Order 12564
  • Employment is contingent upon successful completion of a security background investigation and polygraph
Job Responsibility
Job Responsibility
  • Provide support for a program, organization, system, or enclave's information assurance program
  • Provide support for proposing, coordinating, implementing, and enforcing information systems security policies, standards, and methodologies
  • Maintain operational security posture for an information system or program to ensure information systems security policies, standards, and procedures are established and followed
  • Assist with the management of security aspects of the information system and perform day-to-day security operations of the system
  • Evaluate security solutions to ensure they meet security requirements for processing classified information
  • Perform vulnerability/risk assessment analysis to support security authorization
  • Provide configuration management (CM) for information systems security software, hardware, and firmware
  • Manage changes to system and assess the security impact of those changes
  • Prepare and review documentation to include System Security Plans (SSPs), Risk Assessment Reports, Certification and Accreditation (C&A) packages, and System Requirements Traceability Matrices (SRTMs)
  • Support security authorization activities in compliance with National Institute of Standards and Technology Risk Management Framework (NIST RMF)
What we offer
What we offer
  • Medical: CTP offers 3 superior plans, bringing our employees both in-network and out-of-network options
  • Vision + Dental: Both free to you + paid in full by CTP
  • Retirement: 401k - 6% company contribution
  • PTO + Leave: Offering customizable leave plans
  • Jury Duty, Bereavement + Military Leave provided
  • Career Growth: Up to $10,000 provided for approved career-related learning, training, education, and/or tuition
  • Life and AD&D Insurance/Short-Term & Long-Term Disability: at zero cost to you
  • Profit Sharing Bonus: End of year cash gets added to your bottom-line
  • Referral Bonus Program: Our bonuses range from $7,000-$20,000
  • Fulltime
Read More
Arrow Right

Information Systems Security Officer Level 2

Provide support for a program, organization, system, or enclave's information as...
Location
Location
United States , Annapolis Junction
Salary
Salary:
Not provided
ctp-web.com Logo
Columbia Technology Partners
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • Eight (8) years of combined work-related experience in the fields of IT, cybersecurity or security authorization is required
  • Experience in at least two of the following areas is required: knowledge of current security tools, hardware/software security implementation
  • communication protocols
  • or encryption tools and techniques
  • Familiarity with commercial security products, security authorization techniques, security incident management, and PKI and authorization services
  • Bachelor's degree in Computer Science or a related field (e.g. General Engineering, Computer Engineering, Electrical Engineering, Systems Engineering, Mathematics, Computer Forensics, Cybersecurity, Information Technology, Information Assurance, Information Security, and Information Systems) is required
  • In lieu of a Bachelor's degree, four (4) additional years of work-related experience may be substituted
  • U.S. Citizenship is required for all applicants
  • All applicants and employees are subject to random drug testing in accordance with Executive Order 12564
  • Employment is contingent upon successful completion of a security background investigation and polygraph
Job Responsibility
Job Responsibility
  • Provide support for a program, organization, system, or enclave's information assurance program
  • Provide support for proposing, coordinating, implementing, and enforcing information systems security policies, standards, and methodologies
  • Maintain operational security posture for an information system or program to ensure information systems security policies, standards, and procedures are established and followed
  • Assist with the management of security aspects of the information system and perform day-to-day security operations of the system
  • Evaluate security solutions to ensure they meet security requirements for processing classified information
  • Perform vulnerability/risk assessment analysis to support security authorization
  • Provide configuration management (CM) for information systems security software, hardware, and firmware
  • Manage changes to system and assess the security impact of those changes
  • Prepare and review documentation to include System Security Plans (SSPs), Risk Assessment Reports, Certification and Accreditation (C&A) packages, and System Requirements Traceability Matrices (SRTMs)
  • Support security authorization activities in compliance with National Institute of Standards and Technology Risk Management Framework (NIST RMF)
What we offer
What we offer
  • Medical: CTP offers 3 superior plans, bringing our employees both in-network and out-of-network options
  • Vision + Dental: Both free to you + paid in full by CTP
  • Retirement: 401k - 6% company contribution
  • PTO + Leave: Offering customizable leave plans
  • Jury Duty, Bereavement + Military Leave provided
  • Career Growth: Up to $10,000 provided for approved career-related learning, training, education, and/or tuition
  • Life and AD&D Insurance/Short-Term & Long-Term Disability: at zero cost to you
  • Profit Sharing Bonus: End of year cash gets added to your bottom-line
  • Referral Bonus Program: Our bonuses range from $7,000-$20,000
  • Fulltime
Read More
Arrow Right

Information System Security Manager Level 3

Provide management support for a program, organization, system, or enclave's Inf...
Location
Location
United States , Annapolis Junction
Salary
Salary:
Not provided
ctp-web.com Logo
Columbia Technology Partners
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • U.S. Citizenship is required for all applicants
  • All applicants and employees are subject to random drug testing in accordance with Executive Order 12564
  • Employment is contingent upon successful completion of a security background investigation and polygraph
  • DOD 8570 compliance with IAM III is required
  • This position requires an active Security Clearance with appropriate Polygraph
  • Twelve (12) years of work-related experience in the field of security authorization is required
  • Experience in the following areas is required: knowledge of current security tools, hardware/software security implementation
  • communication protocols
  • or encryption tools and techniques
  • Familiarity with commercial security products, security authorization techniques, security incident management, and PKI and authorization services
Job Responsibility
Job Responsibility
  • Provide management support for a program, organization, system, or enclave's Information Assurance program
  • Provide management support for proposing, coordinating, implementing, and enforcing Information System Security policies, standards, and methodologies
  • Manage operational security posture for an Information System or program to ensure Information System Security policies, standards, and procedures are established and followed
  • Provide management of security aspects of the Information System and perform day-to-day security operations of the system
  • Assist ISSEs and ISSOs with evaluating security solutions to ensure they meet security requirements for processing classified information
  • Manage the performance of vulnerability/risk assessment analysis to support security authorization
  • Provide management support to configuration management (CM) for information system security software, hardware, and firmware
  • Manage changes to systems and assess the security impact of those changes
  • Manage the process and preparation of documentation reviews to include System Security Plans (SSPs), Risk Assessment Reports, Certification and Accreditation (C&A) packages, and System Requirements Traceability Matrices (SRTMs)
  • Support security authorization activities in compliance with NSA/CSS Risk Management Framework (RMF) process and DoD Information Assurance Certification and Accreditation Process (DIACAP)
What we offer
What we offer
  • Medical: CTP offers 3 superior plans, bringing our employees both in-network and out-of-network options
  • Vision + Dental: Both free to you + paid in full by CTP
  • Retirement: 401k - 6% company contribution
  • PTO + Leave: A work life balance is extremely important to our team here at CTP, which is why our paid time off plans are so lucrative. Offering customizable leave plans to meet your needs is just one of our many perks! Jury Duty, Bereavement + Military Leave provided
  • Career Growth: Up to $10,000 provided for approved career-related learning, training, education, and/or tuition
  • Life and AD&D Insurance/Short-Term & Long-Term Disability: More peace of mind, at zero cost to you
  • Profit Sharing Bonus: End of year cash gets added to your bottom-line
  • Referral Bonus Program: Our tiered program provides an incentive with each stage of the hiring process your referral passes. Our bonuses range from $7,000-$20,000, if your referral joins the team
  • Fulltime
Read More
Arrow Right

Senior Information Systems Security Officer

2HB Incorporated is seeking a Senior Information Systems Security Officer to sup...
Location
Location
United States , Annapolis Junction
Salary
Salary:
Not provided
2hb.com Logo
2HB
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • Bachelor of Science degree in Computer Science, Information Assurance, Information Security, or related discipline and 12 or more years of related experience
  • Minimum of 7+ years of experience as an ISSO supporting IC or DoD programs and contracts of similar scope, type, and complexity
  • DoD 8570 compliance with IAM Level II or IAT Level III (i.e., CASP, CISSP, or Associate)
  • TS/SCI/Full Scope Polygraph Clearance
Job Responsibility
Job Responsibility
  • Provides aid to the program, organization, system, or enclave's information assurance program
  • Lends assistance for proposing, coordinating, implementing, and enforcing information systems security policies, standards, and methodologies
  • Maintains operational security posture for an information system or program to ensure information systems security policies, standards, and procedures are established and followed
  • Assists with the management of security aspects of the information system and performs day-to-day security operations of the system
  • Evaluates security solutions to ensure they meet security requirements for processing classified information
  • Performs vulnerability/risk assessment analysis to support certification and accreditation
  • Provides configuration management (CM) for information system security software, hardware, and firmware
  • Manages changes to system and assesses the security impact of those changes
  • Prepares and reviews documentation to include System Security Plans (SSPs), Risk Assessment Reports, Certification and Accreditation (C&A) packages, and System Requirements Traceability Matrices (SRTMs)
  • Assists security authorization activities in compliance with Information System Certification and Accreditation Process (NISCAP) and DoD Risk Management Framework (RMF)
  • Fulltime
Read More
Arrow Right