Information Systems Security Officer; FORECASTED

Position Overview

Columbia Technology Partners is seeking an Information Systems Security Officer (ISSO) to support the security and compliance posture of information systems, programs, and enclaves across mission‑critical environments. The role involves implementing and enforcing information security policies, supporting RMF activities, maintaining operational security compliance, and ensuring systems meet established security requirements. ISSOs will work closely with Information System Security Managers (ISSMs), engineers, administrators, and government stakeholders.

• Implement, coordinate, and enforce information systems security policies, standards, and methodologies.
• Maintain the operational security posture of information systems and ensure compliance with applicable security requirements.
• Support security authorization activities in accordance with NIST Risk Management Framework (RMF) requirements.
• Develop, maintain, and review security documentation, including System Security Plans (SSPs), Risk Assessment Reports, Certification & Accreditation (C&A) packages, and System Requirements Traceability Matrices (SRTMs).
• Evaluate security solutions to ensure compliance with requirements for processing classified information.
• Assist with vulnerability assessments, risk assessments, and security impact analyses.
• Administer user identification and authentication mechanisms for assigned systems.
• Maintain configuration management for security‑relevant hardware, software, and firmware.
• Manage and assess system changes to determine security impacts.
• Maintain records for information systems and security‑related assets, including upgrades and modifications.
• Support the ISSM in maintaining the appropriate information assurance posture for systems, programs, and enclaves.
• Perform day‑to‑day security operations and assist with the management of security aspects of assigned systems.

• Lead information assurance activities for assigned programs, systems, or enclaves.
• Serve as an Information System Security Manager (ISSM) when required.
• Provide daily oversight, guidance, and direction to contractor ISSOs.
• Serve as the Approval Authority for information systems under their control.
• Lead the planning, coordination, and implementation of security programs and policies.
• Interact directly with customers, IT staff, program leadership, and senior executives to define and achieve Information Assurance objectives.
• Oversee certification and accreditation efforts for assigned systems.
• Provide strategic guidance on system security posture, compliance, and risk management activities.
• Ensure security requirements are incorporated into operational and organizational objectives.

• Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or a related discipline from an accredited college or university.
• Ten (10) years of experience as an Information Systems Security Officer supporting programs and contracts of similar scope, type, and complexity.
• Four (4) additional years of ISSO experience may be substituted in lieu of a bachelor's degree.
• DoD 8570 compliance with Information Assurance Management (IAM) Level I or higher is required.
• Experience in at least two of the following areas:
  • Security tools and technologies
  • Hardware and software security implementation
  • Communication protocols
  • Encryption techniques and technologies

• Fifteen (15) years of experience as an Information Systems Security Officer supporting programs and contracts of similar scope, type, and complexity.
• Experience in at least three of the following areas:
  • Security tools and technologies
  • Hardware and software security implementation
  • Communication protocols
  • Encryption techniques and technologies

• Experience supporting NIST RMF, security authorization, continuous monitoring, and compliance initiatives.
• Experience developing and maintaining SSPs, C&A packages, risk assessments, and related security documentation.
• Experience supporting classified environments and implementing security controls for government…