Senior Information Systems Security Officer; ISSO -TS​/SCI Poly

Senior Information Systems Security Officer (ISSO)

Location: Annapolis Junction, MD
Clearance Required: TS/SCI with Polygraph
Telework: Based on tasking

We’re seeking a Senior ISSO to support a newly awarded contract and play a key role in strengthening and maintaining the security posture of mission‑critical systems. In this role, you’ll support the full lifecycle of information assurance activities—from policy development and risk assessments to documentation, configuration management, and day‑to‑day security operations. If you’re a seasoned ISSO who thrives in high‑impact environments and enjoys collaborating with technical teams, users, and leadership, this opportunity offers both challenge and purpose.

• Strengthening the organization’s security posture by supporting information assurance initiatives and enforcing established security policies, standards, and methodologies
• Overseeing daily security operations for information systems, including evaluating security solutions for classified environments and conducting vulnerability and risk assessments to support accreditation
• Managing configuration and system integrity by administering configuration management (CM) for security‑related software, hardware, and firmware, ensuring compliance with security controls, and assessing the impact of system changes
• Developing, updating, and maintaining comprehensive security documentation such as System Security Plans (SSPs), Risk Assessment Reports, Certification & Accreditation (C&A) packages, and System Requirements Traceability Matrices (SRTMs)
• Ensuring compliance with security authorization processes, including NISCAP and the DoD Risk Management Framework (RMF)
• Providing technical expertise in security policies and operations, supporting the implementation and maintenance of security measures, and collaborating with stakeholders to strengthen overall system security
• Driving continuous improvement by evaluating existing security processes, identifying vulnerabilities, and implementing proactive measures to enhance system resilience and operational security