Senior Information Systems Security Officer; ISSO

Annapolis, Maryland, United States, Washington, District of Columbia, United States, Reston, Virginia, United States

Global Dimensions is currently seeking a highly experienced and skilled Senior Information Systems Security Officer (ISSO) to support mission-critical cybersecurity and information assurance requirements for an Intelligence Community (IC) customer in Annapolis Junction, Maryland;
Washington, DC; or Reston, Virginia
. The successful candidate will play a pivotal role in strengthening enterprise security, ensuring regulatory compliance, managing cybersecurity risks, and supporting the authorization and continuous monitoring of complex information systems.

The Senior ISSO will oversee and support Risk Management Framework (RMF) processes, security assessments, compliance activities, and Authorization to Operate (ATO) efforts throughout the system development life cycle. This position requires extensive expertise in NIST SP 800-53 security controls, ICD 503, XACTA, Zero Trust architecture, and cloud-native security environments
. The ideal candidate will demonstrate advanced technical judgment, strong leadership capabilities, and the ability to collaborate with cybersecurity professionals, system owners, developers, and government stakeholders to ensure systems meet applicable security requirements.

Essential Job Functions:

Conduct comprehensive technical security assessments, vulnerability evaluations, and compliance reviews to identify cybersecurity risks and recommend appropriate mitigation strategies.

Support the design, implementation, and continuous improvement of information system security controls, cybersecurity processes, and enterprise security initiatives
.

Ensure assigned information systems comply with applicable Intelligence Community security policies, Risk Management Framework (RMF) requirements, and federal cybersecurity standards throughout the program life cycle.

Collaborate with application leads, system administrators, database administrators, software developers, and testing teams to integrate security requirements into system design, development, deployment, and maintenance activities.

Provide technical guidance and security compliance expertise to ensure systems are developed with security controls and regulatory requirements incorporated from the outset
.

Support systems in achieving and maintaining Authorization to Operate (ATO) by identifying compliance gaps, coordinating remediation activities, and maintaining required security documentation.

Plan, coordinate, and support security assessment events
, responding to technical inquiries and compliance requirements from Information Systems Security Managers (ISSMs) and Security Control Assessors (SCAs).

Develop, review, update, and maintain System Security Plans (SSPs), Security Assessment Plans (SAPs), Plans of Action and Milestones (POA&Ms), and other required security authorization documentation using XACTA.

Lead and coordinate Interim Authorization to Test (IATT) and Authorization to Operate (ATO) activities
, working closely with cybersecurity teams, system owners, stakeholders, and the Authorizing Official (AO).

Implement, assess, and validate NIST SP 800-53 security controls within cloud-native Data Platform as a Service (DPaaS) environments to ensure compliance with applicable security requirements.

Apply Zero Trust security principles to protect enterprise data services, including identity and access management, network segmentation, access restrictions, and data flow controls.

Evaluate existing IT architectures, system configurations, and security implementations against applicable security frameworks, including ICD 503
, to identify deficiencies and recommend corrective actions.

Utilize Splunk and other approved security monitoring tools to review system activity, support security assessments, and identify potential security concerns.

Coordinate with ISSMs, Information Systems Security Engineers (ISSEs), system owners, developers, and government security representatives to resolve compliance issues and support security authorization decisions.

Monitor and track security findings, vulnerabilities, remediation activities, and POA&M milestones to ensure timely resolution and sustained compliance.

Provide cybersecurity expertise, technical recommendations, and security status updates to program leadership, government stakeholders, and engineering teams
.

Support continuous monitoring activities and…