Information Systems Security Officer

We are seeking an Information Systems Security Officer to provide senior-level cybersecurity leadership and oversight across all information systems supporting the program, serving as the authoritative subject matter expert on security policy, risk management, and compliance within the Intelligence Community.

Spear AI is a growing defense contracting company dedicated to delivering cutting-edge solutions that support our nation’s security. As we expand, we’re building a culture where innovation meets mission-critical work. We operate with a flat organizational structure that empowers every team member to make an impact, collaborate directly with leadership, and contribute to projects that matter. Whether you’re joining our Hardware, Software, or Services division, you’ll work alongside talented professionals who are committed to excellence and advancing the capabilities that keep our nation safe and secure.

Spear AI builds sonobuoy sensors that are deployed into the water and collect edge data. We also work with the U.S. Navy to collect and process their SONAR data. You’ll have an opportunity to work on real-world projects that directly impact warfighter capabilities and mission success.

We’re a small team wearing many hats, and you’d have a wide variety of responsibilities that include:

• Serve as the senior security authority for all program information systems, providing oversight to ISSOs and security staff

• Lead and manage the Risk Management Framework (RMF) process across multiple systems, ensuring ATOs are achieved and maintained in compliance with ICD 503 and NIST standards

• Develop, implement, and enforce information security policies, procedures, and standards tailored to IC operational environments

• Advise program leadership and the Authorizing Official (AO) on cybersecurity risks, mitigation strategies, and residual risk acceptance

• Oversee continuous monitoring programs, security control assessments, and vulnerability management activities

• Lead incident response, forensic investigations, and after-action reporting for security events affecting classified systems

• Manage and mentor ISSO personnel, establishing clear responsibilities and security workflows

• Coordinate with IC and DoW security stakeholders, including IGs, inspectors, and oversight bodies

• Ensure security architecture and engineering decisions align with mission requirements and applicable directives (ICD 503, CNSSI 1253, NIST SP 800-53)

• Evaluate emerging threats and drive proactive security improvements across AI/ML and data platforms

• Support audits, inspections, and reviews by government oversight authorities

• Active TS/SCI required; must be able to obtain a Polygraph.

• Deep expertise in NIST RMF, ICD 503, CNSSI 1253, and IC/DoW security policy frameworks

• Demonstrated experience achieving and maintaining ATOs for complex, multi-system programs in classified environments

• Strong background in security architecture, risk management, and incident response within JWICS or similar classified networks

• Experience leading and mentoring security teams in a fast-paced, mission-driven environment

• Professional certifications required: CISSP; CISM, CAP, or CASP+ strongly preferred

• DoW 8570/8140 IAM Level III compliance required

• Experience with AI/ML system security considerations

• AWS Gov Cloud or Azure Government security experience

• Military Intelligence or IC experience

• We ship — We don’t work on 18-month projects that are irrelevant before they’re even finished.

• Our work has impact — We build products that are deployed to U.S. submarines and integrate with the sonobuoys we manufacture.

• We’re growing responsibly — We have the resources to hire a lot more people, but we don’t want to build a…