Information Systems Security Officer (ISSO)

Dynamic Aviation • Bridgewater, VA

15h • $88,600 - $112,000 • Hybrid

About The Position

The Information Systems Security Officer (ISSO) is responsible for supporting the security, compliance, and ongoing authorization of organizational information systems, with particular emphasis on systems that process, store, or transmit Controlled Unclassified Information (CUI) and other sensitive information. This role works closely with IT, System Owners, Business Stakeholders, leadership and third-party security partners to implement and maintain security controls, monitor system security, manage compliance documentation, identify and remediate vulnerabilities and support cybersecurity assessments and audits. This position plays a key role in maintaining compliance with applicable cybersecurity requirements including CMMC Level 2, NIST SP 800-171, DFARS requirements and organizational security policies and procedures.

Requirements

• Bachelor’s degree in Cybersecurity, Information Technology, Information Systems, Computer Science, or a related field; equivalent relevant experience may be considered in lieu of a degree.
• 3+ years of experience in cybersecurity, information security, IT security, systems administration, IT compliance, or a related technical field.
• Working knowledge of cybersecurity frameworks and requirements, particularly NIST SP 800-171 and CMMC Level 2.
• Hands-on experience working in a DoD/DoW contractor or subcontractor environment.
• Experience with Tenable.io, Microsoft Sentinel, and Microsoft Defender for Endpoint (or comparable SIEM/XDR/vulnerability management platforms)
• CompTIA Security+ CE certification
• Understanding of core security concepts, including access control, identity management, least privilege, encryption, vulnerability management, system hardening, logging, monitoring, and incident response.
• Experience implementing, maintaining, or assessing technical and administrative security controls.
• Experience creating and maintaining cybersecurity documentation, including policies, procedures, System Security Plans (SSPs), POA&Ms, risk assessments, and compliance evidence.
• Familiarity with Microsoft Windows, Active Directory, Microsoft 365, Azure/Entra ID, and enterprise security technologies.
• Ability to identify cybersecurity risks and compliance gaps and coordinate remediation with technical teams and system owners.
• Strong analytical, troubleshooting, organizational, and documentation skills.
• Strong written and verbal communication skills, with the ability to communicate cybersecurity requirements and risks to both technical and non-technical stakeholders.
• Ability to appropriately handle Controlled Unclassified Information (CUI) and other sensitive or proprietary information.
• Ability to work independently, manage multiple priorities, and collaborate effectively with IT teams, business stakeholders, vendors, auditors, and leadership.
• Ability to travel as required
• US Citizenship
• Possess or able to obtain and maintain a US Passport
• Ability to travel domestically as well as internationally
• Ability to obtain and maintain a DOD Secret Clearance

Nice To Haves

• Certified CMMC Professional (CCP)
• Experience with Governance, Risk, and Compliance (GRC) system documentation

Responsibilities

• Maintain compliance with applicable cybersecurity requirements, including CMMC Level 2, NIST SP 800-171, DFARS, ITAR, PCI DSS, and company security policies.
• Ensure required security controls are implemented, operating effectively, documented, and periodically reviewed.
• Maintain continuous readiness for C3PAO and other cybersecurity assessments, including coordinating evidence collection, control validation, and remediation. SPRS score maintenance and subcontractor flow-down compliance.
• Maintain the System Security Plan (SSP), POA&Ms, policies, procedures, risk assessments, control evidence, and other required compliance documentation.
• Identify, assess, track, and coordinate remediation of vulnerabilities, security deficiencies, and compliance gaps. Experience with Tenable.IO vulnerability management preferred.
• Daily hands-on SIEM/XDR review
• Review access controls, privileged accounts, system configurations, security baselines, logging, encryption, and other protections for sensitive systems and CUI.
• Actively monitor security events and alerts and Coordinate with IT and security/SOC providers to monitor security events, investigate incidents, document findings, and work directly with IT and security/SOC providers through appropriate remediation.
• Evaluate new applications, SaaS platforms, AI tools, hardware, vendors, and system changes for cybersecurity and compliance risks.
• Help maintain the security boundary for systems that store, process, or transmit CUI and ensure appropriate handling and protection requirements are followed.
• Develop and maintain cybersecurity policies, standards, procedures, and security-awareness requirements. Tracking and reporting on Security Awareness metrics.
• Work with IT, Legal, Contracts, business owners, leadership, vendors, consultants, and assessors to address cybersecurity and compliance requirements.
• Monitor changes in cybersecurity requirements and threats and recommend improvements to strengthen the organization's overall security posture.
• Other duties as assigned

Benefits

• Pay Band: $88,600. - $112,000. Starting pay is determined by experience, qualifications, and internal equity, and typically falls between the minimum and midpoint of the pay range.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level