Information System Security Officer; ISSO

Description

Job Title: Information System Security Officer (ISSO)

Place of Performance: Bellevue, Nebraska (Omaha, Nebraska metropolitan area)

Mandatory Requirements: TS/SCI Clearance

Experience Level: Mid-Sr Level (3-8+ years)

On-Site, hybrid, remote: On-Site

Travel: Minimal / As Required

About JFL Consulting: With more than 20 years of securing some of the U.S. Department of Defense and the Intelligence Community's most critical networks, JFL Consulting, LLC provides advanced network security solutions to a range of US Government and US commercial clients. Our cybersecurity operators are experts at assessing and defending mission-critical data and the networks that facilitate their operation. We are focused on delivering advanced products and industry best practices that meet each customer’s unique requirements.

Visit

What We Offer:

• Salary: $120k - $140k
• 100% employer-paid medical, dental, and vision premiums for employees and dependents
• Flexible Spending Accounts (healthcare, dependent care, and commuter)
• Life insurance, short-term disability and long-term disability
• 401(k) with immediate vesting of company contribution
• Generous PTO policy (15 vacation, 5 sick, 2 personal days, 11 holidays)
• We support your growth through certification reimbursement, dedicated professional development funding, and company-provided access to online learning platforms

Job Overview: JFL Consulting is seeking a skilled Information System Security Officer (ISSO) to support cybersecurity, Risk Management Framework (RMF), and system authorization activities across secure government environments. This position is focused on maintaining the security posture of assigned information systems throughout their lifecycle, supporting Authorization to Operate (ATO) and continuous monitoring activities, and ensuring compliance with applicable DoD cybersecurity requirements.

Candidates should have hands-on experience with RMF processes, security documentation, vulnerability management, security control implementation and validation, and remediation activities.

Key Responsibilities:

Responsibilities
- RMF & Authorization Support:

• Work directly with the Risk Management Framework (RMF) team (e.g., Information System Security Managers (ISSM), ISSOs, Cyber Security Engineers) supporting critical networks, and future RMF/Authorization to Operate (ATO) efforts.
• Maintain the security posture of assigned information systems throughout their lifecycle.
• Support RMF activities, including system authorization and reauthorization efforts.
• Support development, maintenance, and execution of RMF packages within eMASS, Xacta, or other applicable compliance tools.
• Ensure compliance with applicable cybersecurity policies, standards, and frameworks, including NIST guidance (Special Publication (SP) 800-53 Rev.
  5) and Department of Defense cybersecurity requirements.
• Support Security Control Assessments (SCAs), audits, inspections, and authorization activities.
• Coordinate security control remediation efforts with ISSMs, Network / Systems Engineers, System Administrators and support maintenance of system authorization status.

Security Documentation & Compliance

• Develop, maintain, and review system security documentation, including:
• System Security Plans (SSPs)
• Plans of Action and Milestones (POA&Ms)
• Security Control Traceability Matrices (SCTMs)
• Review security configurations, system changes, and software deployments for cybersecurity and compliance impacts.
• Track and report cybersecurity metrics, vulnerabilities, incidents, remediation activities, and overall compliance status.
• Support continuous monitoring (Con Mon) activities and associated documentation.
• Maintain accurate documentation necessary to support RMF, ATO, audit, and compliance requirements.

Vulnerability…