Information System Security Officer (ISSO)

ECS Tech Inc•Fairfax, VA

2d•$110,000 - $150,000•Hybrid

About The Position

Everforth ECS is seeking an experienced Information System Security Officer (ISSO) to support the development, documentation, and execution of the Risk Management Framework (RMF) authorization process for complex Department of Defense information systems. This individual will focus on security control documentation, control inheritance, assessment preparation, and coordination of authorization artifacts while working closely with engineering teams, common control providers, and government stakeholders. This position requires a detail-oriented cybersecurity professional with strong technical writing skills and experience managing RMF documentation throughout the system authorization lifecycle.

Requirements

U.S. Citizen
Active DoD Secret security clearance
Bachelor's degree in Cybersecurity, Information Systems, Computer Science, or related discipline (or equivalent experience).
5+ years supporting DoD or Federal cybersecurity programs.
Demonstrated experience supporting RMF authorizations using NIST SP 800-37 Rev. 2.
Experience developing and maintaining RMF documentation, including System Security Plans (SSPs).
Experience with NIST SP 800-53 Rev. 5 security controls and NIST SP 800-53A assessment procedures.
Experience documenting inherited controls and coordinating with Common Control Providers.
Strong technical writing, document management, and organizational skills.
Ability to coordinate with technical teams, government customers, and assessors.
Cybersecurity certification meeting DoD 8140 Cyber Workforce Qualification requirements.
Strong problem-solving and decision-making capabilities, with a proven ability to weigh the relative costs and benefits of potential actions and identify the most appropriate solution.
Highly developed interpersonal and oral/written communication skills, with the ability to effectively and professionally interact with a diverse set of stakeholders (from peers to end-users to executive management).

Responsibilities

Maintain the authoritative security control inventory and associated authorization boundary documentation.
Develop, review, and maintain System Security Plan (SSP) implementation statements.
Coordinate security control implementation documentation across multiple technical and organizational stakeholders.
Analyze and document inherited security controls, validating applicability and identifying implementation gaps.
Coordinate collection of common control documentation, assessment artifacts, and supporting authorization evidence.
Maintain evidence repositories, document version control, implementation status, and deficiency tracking.
Support development of governance documentation, policies, procedures, and operational security documentation.
Coordinate package reviews, assessment support activities, responses to assessor requests, and authorization package submissions.
Track implementation status of security controls and escalate unresolved risks or documentation gaps.
Support continuous monitoring activities and documentation updates following authorization.
Other duties, as assigned.