Information Systems Security Officer (ISSO)

TheIncLab•Tampa, FL

4d•Hybrid

About The Position

The Mission Starts Here TheIncLab engineers and delivers intelligent digital applications and platforms that revolutionize how our customers and mission-critical teams achieve success. We are where innovation meets purpose; and where your career can meet purpose as well. We are looking for an Information Systems Security Officer (ISSO). If you are organized, detailed oriented and like working in a collaborative team environment to make an impact, we encourage you to apply and take the first step in joining our dynamic and impactful company. Your Mission, Should You Choose to Accept As an ISSO, you will maintain the security posture of assigned systems and support Risk Management Framework (RMF) activities across the system life cycle. The ISSO partners with system owners, security leadership, assessors, administrators, and mission stakeholders to manage authorization documentation, monitor compliance, track vulnerabilities, and ensure systems operate within approved risk parameters.

Requirements

Bachelor’s degree in Cybersecurity, Information Systems, Computer Science, Information Technology, or related field; relevant experience may substitute when contractually permitted.
5+ years of cybersecurity, information assurance, security engineering, compliance, cloud security, or RMF experience.
Experience supporting RMF authorization activities, including SSP, SAR, POA&M, risk assessment, continuous monitoring, vulnerability management, and audit review.
Working knowledge of NIST RMF, NIST SP 800-37, NIST SP 800-53, and system life cycle security practices.
Experience creating or maintaining cybersecurity policies, procedures, standards, security plans, and compliance documentation.
Current role-aligned certification such as Security+, CySA+, CGRC, CISSP, CISM, CCSK, CCSP, or equivalent.
Ability to communicate risk, compliance status, findings, and remediation priorities to technical and non-technical audiences.
Applicants must be a U.S. Citizen and willing and eligible to obtain a U.S. Security Clearance at the Secret or Top-Secret level.

Nice To Haves

Experience with federal or defense authorization packages, eMASS or similar GRC tools, vulnerability management platforms, cloud environments, and security assessments.
Active U.S. Security Clearance and experience in DoD, Intelligence Community, federal, or cleared contractor environments.
Existing clearance is preferred.

Responsibilities

Maintain the operational security posture of assigned information systems in coordination with system owners, ISSM/CISO, administrators, and authorization stakeholders.
Support RMF activities, including control implementation, assessment support, authorization package development, continuous monitoring, and ongoing authorization.
Develop and maintain security artifacts, including SSPs, SARs, POA&Ms, risk assessments, continuous monitoring evidence, and supporting procedures.
Coordinate security control implementation with engineering, infrastructure, cloud, application, and operations teams throughout the system life cycle.
Conduct or support audit log reviews, vulnerability scans, configuration reviews, internal assessments, and compliance monitoring.
Track, validate, and report remediation of vulnerabilities, findings, control deficiencies, POA&M items, and risk acceptance decisions.
Assess the security impact of system changes, software, cloud services, interconnections, and configuration updates.
Support security event review, incident response coordination, escalation, reporting, and lessons learned.
Prepare cybersecurity status updates, metrics, briefings, and compliance reports for leadership, customers, auditors, and assessors.