Information System Security Officer (Secret Cleared)

Latitude Inc•California, MD

2d•$120,000 - $150,000

About The Position

We are seeking an experienced Information System Security Officer (ISSO) to oversee and maintain the security posture of information systems throughout their lifecycle. The ISSO will ensure systems comply with applicable security policies, standards, and regulatory requirements while supporting risk management, authorization, and continuous monitoring activities. This role works closely with IT, engineering, compliance, and leadership to protect organizational information assets. Active Secret clearance or higher is required.

Requirements

Active Secret clearance or higher is required

Responsibilities

Implement and maintain security controls in accordance with applicable frameworks (e.g., NIST, ISO, CIS)
Ensure information systems comply with organizational policies, regulatory requirements, and contractual obligations
Support system authorization activities, including ATO packages, risk assessments, and security documentation
Conduct continuous monitoring, vulnerability assessments, and security control testing
Track and remediate Plan of Action & Milestones (POA&Ms)
Identify, assess, and mitigate system-level security risks
Perform security impact analyses for system changes and enhancements
Support risk acceptance and exception processes
Participate in audits, inspections, and security assessments
Monitor security alerts and logs; investigate potential security incidents
Support incident response activities, including containment, remediation, and reporting
Coordinate with SOC, IT, and system owners during security events
Develop and maintain System Security Plans (SSPs), policies, procedures, and supporting artifacts
Provide security guidance to system owners, administrators, and users
Support security awareness and compliance training initiatives
Work with IT and engineering teams to integrate security into system design and operations
Recommend and implement security improvements and best practices
Stay current on emerging threats, vulnerabilities, and regulatory changes