Senior Information Systems Security Officer; ISSO

SAIC is seeking a motivated and skilled
Senior Information Systems Security Officer (ISSO)to support cybersecurity and compliance activities for mission-critical IT systems on theM
AJESTIC Joint Program Office (JPO) Team
. In this role, the ISSO will be responsible for implementing, managing, and assessing system security controls to ensure compliance with government regulations, standards, and best practices, including
NIST 800-53,RMF
, and other federal security policies.

The ideal candidate will work closely with system owners, administrators, and cross-functional security teams to assess risks, maintain security postures, and ensure the confidentiality, integrity, and availability of information systems that support the mission. This role requires on-site supportin Springfield, VA
.

• Ensure compliance with Risk Management Framework (RMF) requirements by developing, maintaining, and assessing system security artifacts, including System Security Plans (SSPs), POA&Ms, and applicable policies and procedures
• Implement and validate security controls in alignment with NIST 800-53, associated overlays, and system-specific requirements
• Support the Accreditation and Authorization (A&A) process, including preparing documentation and achieving and maintaining system Authority to Operate (ATO) status
• Conduct risk assessments and vulnerability analysis, identify potential threats and weaknesses, and provide recommendations for mitigation
• Work with IT teams to implement system hardening for platforms, applications, and networks in compliance with DISA STIGs and cybersecurity best practices
• Perform continuous monitoring of systems using tools such as Splunk, ACAS, or Solar Winds, ensuring real-time threat detection, event notifications, and security compliance validation
• Collaborate with cross-functional teams, including system administrators, developers, and ISSMs, to address security risks, system vulnerabilities, and security incidents
• Support incident response activities by conducting forensic analysis, generating reports, and coordinating efforts to remediate and recover from security events
• Provide cybersecurity awareness training for users and team members to ensure adherence to organizational security requirements and best practices
• Prepare and deliver security status updates, risk reports, and briefings to senior stakeholders and leadership
• Develop and maintain system documentation, including security control implementation descriptions, policies, and SOPs

• Bachelor’s Degree

• Candidates must satisfy
  722 (Information Systems Security Manager)requirements, as outlined by Navy COOL
  This requirement can be met by possessing one or more of the following qualifying certifications:
• ISC2 CC (Certified in Cybersecurity)
• CompTIA Cloud+
• CompTIA Security+
• CompTIA SecurityX / CASP+
• ISC2 SSCP (Systems Security Certified Practitioner)
• GIAC GSEC (Security Essentials)
• United America Technologies CISSO (Certified Information Systems Security Officer)
• ISC2 CGRC / CAP (Certified in Governance, Risk, and Compliance)
• EC-Council CCISO (Certified Chief Information Security Officer)
• ISC2 CCSP (Certified Cloud Security Professional)
• GIAC GCSA (Cloud Security Automation)
• GIAC GMON (Continuous Monitoring)
• ISACA CISM (Certified Information Security Manager)
• ISC2 CISSP (Certified Information Systems Security Professional)
• ISC2 CISSP‑ISSMP (Information Systems Security Management Professional)
• Federal IT Security Institute FITSP‑M (Federal IT Security Professional – Manager)
• GIAC GCIA (Certified Intrusion Analyst)
• GIAC GCIH (Certified Incident Handler)
• GIAC GICSP (Global Industrial Cyber Security Professional)
• GIAC GSLC (Security Leadership)