Information Systems Security Officer (ISSO)

Entarian•Denver, CO

About The Position

Entarian is seeking an experienced Information Systems Security Officer (ISSO) to support the cybersecurity compliance, accreditation, and day-to-day security operations of assigned information systems in accordance with applicable government policies, cybersecurity standards, and Risk Management Framework (RMF) requirements. The ISSO works closely with the Information System Security Manager (ISSM), Information System Security Engineers (ISSEs), system administrators, engineers, and government stakeholders to ensure information systems remain compliant, secure, and authorized throughout the system life-cycle. The ideal candidate will have demonstrated experience supporting Department of Defense or federal information systems involving mission operations, communications networks, cloud environments, space systems, or enterprise information technology capabilities.

Requirements

Active Top Secret security clearance with SCI eligibility.
Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Engineering, or a related technical discipline. Equivalent experience may be considered.
Minimum five (5) years of experience serving as an Information Systems Security Officer (ISSO) or supporting cybersecurity compliance for Department of Defense, Intelligence Community, or federal information systems.
Demonstrated experience supporting the Risk Management Framework (RMF) in accordance with NIST SP 800-37, NIST SP 800-53, and applicable DoD cybersecurity guidance.
Experience supporting Authorization to Operate (ATO), Authorization to Connect (ATC), Interim Authorization to Test (IATT), or other government system authorization activities.
Experience maintaining RMF documentation including System Security Plans (SSPs), POA&Ms, Security Assessment Reports (SARs), and continuous monitoring artifacts.
Familiarity with vulnerability management, security control implementation, configuration management, and cybersecurity compliance activities.
Experience coordinating with system administrators, systems engineers, software developers, ISSMs, and government cybersecurity organizations.
Working knowledge of enterprise operating systems, networking, cloud environments, and information security technologies.
DoD 8140 (or legacy DoD 8570) compliant cybersecurity certification such as Security+, SSCP, GSEC, CISSP, CAP, or other qualifying certification.
Strong written and verbal communication skills with the ability to prepare technical documentation and communicate cybersecurity requirements to technical and non-technical stakeholders.
Proficiency with Microsoft Office Suite, including Word, Power-Point, Excel, Project, and Outlook.
Ability to travel approximately 25% to support customer locations, cybersecurity assessments, mission partner engagements, and operational activities.

Nice To Haves

Experience supporting classified Department of Defense, Intelligence Community, or U.S. Space Force information systems.
Experience using eMASS, ACAS, Nessus, SCAP Compliance Checker, STIG Viewer, or comparable cybersecurity compliance and vulnerability management tools.
Familiarity with AWS GovCloud, Azure Government, hybrid cloud environments, or cloud security compliance.
Experience supporting continuous monitoring programs, vulnerability remediation, and cybersecurity audits.
Knowledge of Zero Trust Architecture principles and secure systems engineering concepts.
Experience supporting DevSecOps environments, secure software development, or automated compliance pipelines.
Security certifications such as CAP , SSCP , CISSP , CASP+ , or comparable cybersecurity credentials.
Experience supporting mission operations, communications, space systems, enterprise IT, or other mission-critical environments.
Excellent organizational skills with the ability to manage multiple accreditation efforts and competing priorities in a dynamic operational environment.

Responsibilities

Serve as the Information Systems Security Officer (ISSO) for assigned information systems, ensuring compliance with applicable cybersecurity policies, procedures, and government requirements.
Support implementation and execution of the Risk Management Framework (RMF) life-cycle, including system categorization, security control implementation, assessment, authorization, and continuous monitoring.
Support Authorization to Operate (ATO), Authorization to Connect (ATC), Interim Authorization to Test (IATT), and system reauthorization activities by preparing and maintaining required cybersecurity documentation.
Maintain System Security Plans (SSPs), Plans of Action and Milestones (POA&Ms), security control implementation documentation, continuous monitoring artifacts, and other RMF deliverables.
Monitor system security posture through vulnerability assessments, configuration reviews, security compliance checks, and continuous monitoring activities.
Coordinate vulnerability remediation activities with system administrators, engineers, and technical teams to resolve cybersecurity findings and maintain compliance.
Review proposed system changes, software releases, configuration changes, and architecture updates to assess cybersecurity impacts and support accreditation requirements.
Conduct periodic security audits, self-assessments, and compliance reviews to verify implementation of required security controls.
Support security control assessments, inspections, audits, and government cybersecurity reviews.
Coordinate with the ISSM, ISSEs, system owners, Authorizing Official (AO), Security Control Assessor (SCA), and other stakeholders regarding system authorization status, security findings, and compliance activities.
Assist with cybersecurity incident reporting, documentation, investigation support, and corrective action tracking.
Support security awareness activities and provide cybersecurity guidance to system users and project teams.
Prepare technical documentation, status reports, compliance metrics, and executive briefings supporting program leadership and government customers.