Information Systems Security Officer (SME)
About The Position
Everforth ECS is seeking a cleared Information Systems Security Officer SME to lead cybersecurity compliance, authorization, continuous monitoring, audit support, risk management, and security documentation activities for classified and sensitive systems supporting law enforcement, national security, and criminal justice missions within the National Security Business Unit. The ISSO SME will serve as a senior cybersecurity advisor responsible for maintaining security posture, supporting authorization activities, managing security documentation, advising technical teams on risk, supporting audits, and ensuring systems comply with applicable federal, agency, and mission security requirements. The ISSO SME will also support National Security Business Unit growth by identifying cybersecurity service expansion opportunities, compliance improvement initiatives, continuous authorization enhancements, risk-reduction strategies, audit support improvements, and security modernization needs.
Requirements
- Active Top Secret clearance with SCI eligibility; TS/SCI preferred.
- 10+ years of cybersecurity, ISSO, authorization, compliance, risk management, or security engineering experience.
- Experience with federal cybersecurity frameworks, security control assessments, POA&Ms, audits, vulnerability management, and continuous monitoring.
- Experience supporting security documentation, authorization packages, incident response plans, and security policies.
- Strong understanding of secure system operations, risk management, and security compliance.
- Ability to communicate cybersecurity risks and requirements to technical teams, mission stakeholders, and leadership.
Responsibilities
- Lead cybersecurity compliance, authorization, risk management, and continuous monitoring activities.
- Maintain security documentation, control implementation records, POA&Ms, security plans, policies, and procedures.
- Conduct or support control assessments, audit readiness, vulnerability remediation, and security impact reviews.
- Review security impacts of new applications, devices, system changes, and operational updates.
- Coordinate incident response planning, contingency planning, annual testing, and cybersecurity reporting.
- Advise system owners, engineers, developers, administrators, and operations teams on risk-based security decisions.
- Mentor ISSOs, security engineers, administrators, developers, and operations staff on compliance and security workflows.
- Establish repeatable templates, dashboards, processes, and documentation practices.
- Identify cybersecurity modernization, compliance improvement, continuous authorization, and service expansion opportunities.
Benefits
- General Description of Benefits
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
Education Level
No Education Listed
