Information Systems Security Officer (ISSO)

BROWN TECHNOLOGIES INCORPORATED•Vicksburg, MS

3d•Hybrid

About The Position

The Information Systems Security Officer (ISSO) supports cybersecurity compliance, authorization, and continuous monitoring of DoD information systems. The ISSO executes Risk Management Framework (RMF) activities, maintains system security documentation in eMASS, and ensures systems remain compliant with DoD cybersecurity requirements. This role involves documenting and validating security control implementations, collecting supporting evidence, and coordinating with system administrators and engineers to ensure required controls are implemented and maintained. The ISSO plays a critical role in maintaining system authorization and supporting ongoing compliance efforts within dynamic DoD environments.

Requirements

U.S. Citizen with the ability to obtain a Secret Clearance
Minimum of three (3) years of cybersecurity or information assurance experience supporting DoD systems.
Hands-on experience executing RMF activities and managing authorization packages within eMASS or similar systems.
Working knowledge of NIST SP 800-53 security controls and the DoD RMF lifecycle.
Experience supporting vulnerability management processes including ACAS/Nessus, SCAP tools, and DISA STIGs.
Experience developing and maintaining RMF documentation such as SSPs, POA&Ms, SAPs, and SARs.
Strong organizational and documentation skills.
Ability to communicate cybersecurity requirements effectively to technical and non-technical stakeholders.
Ability to manage multiple systems and competing priorities.
DoD 8140 / 8570 compliant certification (e.g., Security+ CE, CISSP, CASP).

Nice To Haves

U.S. Citizen and active Secret Clearance
Experience with enterprise architectures or shared services environments.
Familiarity with control inheritance, system boundaries, and architecture documentation.
Experience supporting security assessments (SCA/SCA-V or internal teams).
Familiarity with SIEM tools, audit log review processes, and endpoint security solutions.
Experience with Tenable ACAS.
Understanding of FedRAMP or CNSSI 1253 security control baselines.

Responsibilities

Support cybersecurity compliance and authorization of assigned information systems in accordance with DoD RMF under ISSM direction.
Develop, update, and maintain RMF documentation including System Security Plans (SSP), Security Assessment Plans (SAP), Security Assessment Reports (SAR), Plans of Action and Milestones (POA&M), and Risk Assessment Reports (RAR).
Manage RMF activities within eMASS, including control implementation statements, artifact uploads, evidence tracking, POA&M management, and package status tracking.
Document and track NIST SP 800-53 security control implementations and prepare controls for validation and approval.
Collect, validate, and maintain control implementation evidence supporting authorization and continuous monitoring requirements.
Review and analyze vulnerability and compliance scan results, including ACAS/Nessus outputs, SCAP compliance results, and DISA STIG checklists.
Coordinate with system administrators and engineers to validate remediation actions and ensure findings are properly tracked in POA&Ms.
Support system authorization activities including preparation for assessments, coordination with assessment teams, and remediation tracking.
Perform continuous monitoring activities such as vulnerability tracking, configuration compliance checks, periodic control validation, and audit log coordination.
Evaluate the security impact of system changes and update RMF documentation accordingly.
Ensure compliance with DoD cybersecurity policies including DoDI 8510.01, NIST SP 800-53, and DISA STIGs.
Provide cybersecurity guidance to system owners and technical teams.
Develop and maintain compliance reporting including POA&M status, remediation progress, and authorization timelines.
Assist with control inheritance and system boundary documentation.
Support audit readiness and participate in internal or external security assessments.
Provide input to improve RMF processes and documentation quality.
Collaborate across teams to ensure alignment of cybersecurity requirements and implementation efforts.