ISSO

If you are unable to complete this application due to a disability, contact this employer to ask for an accommodation or an alternative application process.

N3B-TCP2 Regular Full Time

Position Location:

This position is located in Los Alamos, New Mexico.

Los Alamos is a tight-knit mountain community that consistently ranks as one of ’s Best Small Towns in America. For two years in a row, Los Alamos County has ranked as the healthiest county in the nation according to a U.S. News report. The city is a top spot for outdoor enthusiasts as it has more than 120 hiking and biking trails, and residents enjoy easy access to the Pajarito Mountain Ski Area.

Thanks to the University of New Mexico-Los Alamos’ presence in the area, Los Alamos also has a college-town vibe that’s a major draw for young professionals, families and retirees.

Position Summary

The Information Systems Security Officer (ISSO) Lead / Alternate Information System Security Manager (AISSM) provides senior-level cybersecurity oversight and technical support across assigned information systems to ensure compliance with Department of Energy (DOE), National Nuclear Security Administration (NNSA), federal, and N3B cybersecurity requirements. This position leads to execution of system authorization activities, continuous monitoring, vulnerability management, and mentorship of ISSO staff.

The role advises and shares ownership/authorship of System Security Plans (SSPs), Security Assessment Reports (SARs), Assessment & Authorization (A&A) packages, control narratives, and other administrative RMF documents. The ISSO Lead also serves as the Alternate Information System Security Manager (AISSM), covering ISSM responsibilities during periods of absence, major escalations, or elevated operational needs.

Essential Duties/Responsibilities (may include, but are not limited to):

• Serve as Lead ISSO across assigned General Support Systems (GSS), Major Applications (MA), Industrial Control Systems (ICS), and specialty systems.
• Support the ISSM by ensuring operational continuity during escalated or delegated ISSM activities, including system-security leadership, coordination of staff, and implementation of DOE/NNSA cybersecurity mandates.
• Provide mentorship and skill development for ISSO, ISSE, and Risk Analyst staff.
• Lead development and maintenance of all Assessment & Authorization (A&A) documentation, including SSPs, SARs, Configuration Management Plans (CMPs), Contingency Plans (CPs), Incident Response Plans (IRPs), and Risk Assessment (RA) artifacts.
• Support ISSM and ISSO in preparation, review, and timely submission of Regulatory Documentation (Reg Docs) deliverables, Plan of Action & Milestones (POA&M) updates, and Authorization to Operate (ATO) packages.
• Ensure documentation is consistent with Los Alamos Legacy Clean-up Contract (LLCC) governance expectations.
• Oversee implementation, testing, and verification of NIST SP 800-53 controls across assigned systems.
• Conduct vulnerability management, log review, control testing, and evidence collection.
• Elevate critical findings to ISSM, Cybersecurity Manager, and Chief Information Security Officer (CISO), and coordinate mitigations.
• Lead risk assessments for cybersecurity findings, system changes, new capabilities, and emerging DOE directives.
• Support ISSM, Cybersecurity Manager, and CISO in enterprise risk reporting, compliance tracking, and implementation of organizational governance processes.
• Facilitate peer reviews, POA&M / Performance-Based Incentive (PBI) contributions, and readiness for DOE assessments.
• Engage system owners, Subject Matter Experts (SMEs), and technical stakeholders to ensure cybersecurity expectations are clearly understood and implemented.
• Provide the ISSM with situational…