Information Systems Security Officer

If you are unable to complete this application due to a disability, contact this employer to ask for an accommodation or an alternative application process.

Full Time Professional Salem, NH, US

2 days ago Requisition

Please note:

This is a cybersecurity and industrial security compliance role. It is not an armed security guard position.

Grow your security career across cyber and industrial security.

At API, our ISSO isn't buried in a single lane. You'll keep DoD systems authorized and compliant, maintain our COMSEC account, and support industrial security, working directly with our ISSM, government customers, and leadership. The role has real breadth and real visibility. Your work will shape how a growing defense contractor safeguards its people, programs, and protected information.

If you're a cybersecurity professional who wants to grow across RMF, COMSEC, and industrial security, takes pride in getting the details right, and keeps records an auditor can't fault, we want to talk to you.

Employment Type: Full-Time
Experience: 3+ Years
Security Clearance: Active Secret Required
Reports To: Information System Security Manager (ISSM) / Security Management

We are seeking a detail-oriented and motivated Information System Security Officer (ISSO) with 3+ years of experience to support Department of Defense (DoD) information systems security, cybersecurity compliance, and communications security (COMSEC) activities.

The selected candidate will work closely with the Information System Security Manager (ISSM) to support the Risk Management Framework (RMF), maintain security authorization documentation within the Enterprise Mission Assurance Support Service (eMASS), and assist with continuous monitoring activities.

This individual will also serve as the COMSEC Manager, or Alternate COMSEC Manager, for the facility's COMSEC account. In that role, they will be responsible for the receipt, control, accountability, storage, and destruction of COMSEC material in accordance with NSA and DoD requirements.

In addition, this individual will also be the Facility Security Officer (FSO) with personnel security, industrial security, and administrative security functions.

• Support implementation and maintenance of cybersecurity policies, procedures, and security controls in accordance with DoD RMF requirements.
• Assist with maintaining system authorization packages and security documentation within eMASS.
• Develop, review, and update System Security Plans (SSPs), Plans of Action and Milestones (POA&Ms), and other RMF artifacts.
• Support Assessment and Authorization (A&A) activities and ongoing Authorization to Operate (ATO) requirements.
• Assist with implementing and assessing applicable NIST SP 800-53 security controls.
• Perform continuous monitoring activities to maintain system security compliance.
• Review vulnerability scan results and assist with tracking remediation efforts.
• Support implementation and validation of applicable Security Technical Implementation Guides (STIGs).
• Assist with user account management, access control reviews, and system security documentation.
• Review and maintain system configuration management and change control records.
• Identify, document, and elevate cybersecurity vulnerabilities, incidents, and compliance concerns.
• Coordinate with system administrators, technical personnel, and security stakeholders to resolve security findings.
• Support cybersecurity inspections, security control assessments, and government audits.
• Maintain accurate security records and provide regular status updates to the ISSM.

• Assist the FSO with personnel security clearance processing and administrative security…