Information Systems Security Officer

Title: Information Systems Security Officer (ISSO)
Location: Clarksburg, MD (Onsite)
Type: Direct Hire
Compensation: $150,000/year (salary)
Schedule: 40 hours/week
Clearance Required: Active TS/SCI with Polygraph (required to start)

We’re hiring an Information Systems Security Officer (ISSO) to support mission‑critical, classified environments
. In this role, you’ll help ensure information systems stay compliant throughout the Risk Management Framework (RMF) lifecycle—supporting ATO packages, continuous monitoring, assessments, and audit readiness
. You’ll partner closely with technical teams and security stakeholders to drive secure, compliant system operations.

• Support the full RMF lifecycle for classified information systems
• Build and maintain security authorization packages and RMF documentation
• Coordinate and support Authority to Operate (ATO) efforts
• Perform/control security assessments
  , compliance reviews, and control validation
• Track vulnerabilities, findings, and remediation activities (POA&Ms, etc.)
• Support Continuous Monitoring (Con Mon) and ongoing security activities
• Review scan results/configurations to ensure alignment with security requirements
• Work with system teams to implement/maintain required security controls
• Participate in audits, inspections, and cybersecurity compliance reviews
• Provide risk‑based recommendations to improve security posture

• Active TS/SCI with Polygraph
• Experience in ISSO / Information Assurance / cybersecurity compliance in classified environments
• Strong knowledge of RMF and the security authorization process (ATO)
• Familiarity with:
  • NIST SP 800-53 (Rev 3 and/or Rev
    5)
  • NIST SP 800-37
• Experience with compliance/configuration scanning and assessment workflows
• Strong communication skills (written + verbal) and comfort working cross‑functionally

Experience with RMF/cyber compliance tools such as:

• XACTA
• LATTE / ART
• BISCOTTI
• WATCHCAT
• STE
  (Experience with similar tools is also valuable.)

Hands‑on experience developing/reviewing security documentation such as:

• SSP, POA&M, SAR, RAR
• CMP, CP, BIA
• SPFs / exceptions and related artifacts
• AARs and audit support documentation

• Prior support of classified government systems
• Experience partnering with ISSMs, System Owners, Security Control Assessors, and Authorizing Officials
• Familiarity with vulnerability remediation and system administration security concepts
• Certifications like Security+,
  CISSP
  , CAP
  , CASP+, or CISM

System One is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, age, national origin, disability, family care or medical leave status, genetic information, veteran status, marital status, or any other characteristic protected by applicable federal, state, or local law.