ISSO with Security Clearance

Senior Information Systems Security Officer (ISSO)

Location:

Huntsville, AL

Employment Type:

Direct Hire or Contract

Clearance Required:

Active Top Secret Eligible / Ability to Maintain Required Access

Position Overview We are seeking a Senior Information Systems Security Officer (ISSO) to support mission-critical federal and defense systems within a highly secure environment. This individual will serve as the principal cybersecurity advisor to system owners, business stakeholders, and information security leadership, ensuring systems maintain compliance with federal cybersecurity requirements while supporting operational mission objectives. The ideal candidate has extensive experience supporting Risk Management Framework (RMF) activities, Authorization to Operate (ATO) processes, cybersecurity compliance efforts, vulnerability management, and continuous monitoring programs within complex government environments.

Key Responsibilities
Serve as the primary cybersecurity advisor to the Information System Owner (ISO), Business Process Owner, ISSM, and cybersecurity leadership
Ensure implementation, maintenance, and effectiveness of security controls throughout the system lifecycle
Apply RMF principles and oversee compliance activities supporting authorization and accreditation requirements
Guide systems through the Authority to Operate (ATO) lifecycle, including documentation development, review, submission, and maintenance
Develop, review, maintain, and update cybersecurity documentation including:
System Security Plans (SSPs)
Contingency Plans
Security Assessment documentation
Policies and procedures
Supporting authorization artifacts
Create, update, and manage Plans of Action & Milestones (POA&Ms) based on vulnerability and compliance findings
Conduct security control reviews and validate compliance with applicable federal and organizational requirements
Perform and support network self-inspections, security reviews, and compliance assessments
Track remediation activities and coordinate corrective actions for identified vulnerabilities and deficiencies
Monitor security posture through continuous monitoring activities and vulnerability management processes
Coordinate with engineers, system administrators, developers, and security teams to ensure security requirements are properly implemented
Evaluate cybersecurity risks and provide recommendations to reduce operational and security exposure
Prepare compliance reports, risk assessments, status updates, and executive-level briefings
Support audits, inspections, security assessments, and external reviews
Provide guidance regarding security architecture, operational security requirements, and system hardening activities
Assist with developing and maintaining contingency planning and disaster recovery documentation

Required Qualifications
Bachelor's Degree in Information Assurance, Cybersecurity, Information Technology, Computer Science, Engineering, or a related field
10+ years of cybersecurity, information assurance, ISSO, RMF, or compliance experience
Experience serving as an ISSO, Information Assurance professional, or cybersecurity compliance lead
Strong knowledge of Risk Management Framework (RMF)
Experience supporting Authority to Operate (ATO) activities and security authorization processes
Experience developing and maintaining SSPs, POA&Ms, security assessment documentation, and compliance artifacts
Knowledge of NIST 800-53 security controls and federal cybersecurity requirements
Experience conducting vulnerability assessments and coordinating remediation efforts
Familiarity with Security Test & Evaluation (ST&E) activities
Strong understanding of cybersecurity governance, risk management, and compliance principles
Experience supporting continuous monitoring programs and audit readiness initiatives
Excellent written, verbal, organizational, and interpersonal communication skills
Ability to work independently and provide guidance to technical and non-technical stakeholders

Preferred Qualifications
Experience using Xacta or similar GRC platforms
Experience using eMASS or other federal compliance management systems
Experience supporting DoD, Intelligence Community, or other…