Information System Security Officer

Booz Allen Hamilton•Fort Bragg, NC

1d•$112,900 - $257,000•Onsite

About The Position

Information System Security Officer The Opportunity: We are seeking a highly motivated and experience d Information System Security Officer ( ISSO ) to join our team on a cutting-edge Department of Defense ( DoD ) Zero T rus t project. As the ISSO, you will play a critical role in the planning, implementation, and management of cybersecurity measures for a project focused on enhancing the DoD’s cybersecurity posture through Zero T rus t principles. This is a unique opportunity to work on a high-impact initiative that transforms the way DoD systems are secured and protected from evolving threats.

Requirements

Experience in information assurance, cybersecurity, or serving as an ISSO on DoD or federal projects
Experience developing and managing system security documentation, including System Security Plans ( SSPs ) , Security Assessment Plans ( SAPs ) , and POA & Ms
Experience with tools supporting Zero T rus t implementation, including identity management, endpoint detection, and security analytics solutions
Experience conducting security compliance reviews and audits, and managing continuous monitoring solutions
Knowledge of DoD RMF, NIST Spe cia l Publications ( SP ) 800-53 and 800-207, and cybersecurity frameworks
Knowledge of Identity and Access Management ( IAM ) , Multi-Factor Authentication ( MFA ) , segmentation, and encryption techniques within Zero T rus t architectures
TS/SCI clearance
HS diploma or GED

Nice To Haves

Experience with cloud service provider s such as AWS and DoD Cloud, and applying security controls for cloud-based systems
Experience working with DevSecOps pipelines and security automation tools
Experience in network security, firewalls, or access controls with a focus on Zero T rus t principles
Knowledge of current and emerging DoD policies , standards, and guidance on cybersecurity, including DoD Zero T rus t Strategy and CMMC
Possession of excellent communication skills, to convey cyber risks and solutions to non-technical audiences
Industry-recognized Certification s such as CISSP, CISM, CISA, CCSP, or CASP+

Responsibilities

Support the integration and adoption of Zero T rus t principles, ensuring all systems adhere to DoD cybersecurity mandates and frameworks.
Maintain information system security policies , standards, and procedures, ensuring systems remain compliant with DoD directives such as Risk Management Framework ( RMF ) , NIST 800-53, and Cybersecurity Maturity Model Certification ( CMMC ) .
Identify, track, and mitigate security risks, facilitating vulnerability assessments and penetration testing while ensuring compliance with DoD security requirements.
Lead efforts to achieve and maintain system accreditation under DoD RMF guidelines, overseeing security documentation such as security plans, Plans of Action and Milestones ( POA & Ms ) , and asso cia ted artifacts.
Oversee continuous monitoring activities, incident response plans, and cybersecurity assessments.
Work closely with system engineers, administrators, developers, and leadership to develop and apply security controls aligned with Zero T rus t elements such as identity, endpoint, application, network, and infrastructure.