Information System Security Officer (ISSO)

Razor•Ft Belvoir, VA

1d•Onsite

About The Position

Razor is seeking an experienced Information System Security Officer (ISSO) to maintain system security, support System Plan Identification (SPID) accreditation, and ensure continuous compliance with applicable security policies and requirements. The ISSO will maintain awareness of the security posture of assigned systems, manage security findings and remediation activities, and provide regular security status updates to program and government leadership.

Requirements

Active TS/SCI clearance required.
Experience serving as an ISSO or in a comparable information systems security role.
Experience supporting system accreditation, security compliance, and continuous monitoring activities.
Experience managing POA&Ms, security findings, vulnerability scans, and remediation activities.
Experience with Xacta or similar security compliance and authorization platforms.
Experience supporting enterprise security tools such as HBSS and Carbon Black.
Experience preparing and maintaining security documentation, test plans, and Disaster Recovery documentation.
Knowledge of security impact assessment processes for hardware and software changes.
Ability to assess system security posture and clearly communicate risks, findings, and remediation requirements to technical and government stakeholders.
Strong documentation, communication, and organizational skills.

Responsibilities

Maintain all SPIDs accurately and ensure they remain current in Xacta.
Maintain system security and support SPID accreditation requirements.
Ensure systems remain in a continuous monitoring state and compliant with applicable enterprise security policies, processes, and tools.
Conduct and track required security scans and scheduled enterprise security activities, including HBSS, Carbon Black, and other applicable capabilities.
Maintain and update Plans of Action and Milestones (POA&Ms) to accurately reflect current security findings and drive timely remediation.
Develop and brief remediation plans to the Government Program Management Office (GPMO) and Designated Authorizing Official (DAO), as required.
Submit Security Impact Determination Requests (SIDRs) for software deployments and applicable hardware and software changes.
Develop security test plans and support operational assessments and security evaluations.
Develop and maintain Disaster Recovery (DR) plans for each SPID.
Maintain IT Disaster Recovery (ITDR) plans and documentation and participate in annual ITDR exercises with the Government Program Office.
Prepare security status briefings for government program reviews, including PMRs, CDRs, PSRs, and ORRs.
Identify emerging security risks, findings, and changes to applicable security policies and communicate them to the Site Lead.
Provide weekly security status updates for the Weekly Business Review (WBR).
Maintain continuous awareness of assigned systems' security posture and proactively escalate issues requiring government or program-level attention.