Information Systems Security Officer

Galapagos Federal Systems LLC.•Washington, DC

10d•$145,000 - $155,000

About The Position

Galapagos Federal Systems LLC is seeking an enthusiastic and well-qualified Information Systems Security Officer (ISSO) to join their team. This role involves overseeing and implementing cybersecurity and Information Assurance (IA) requirements for engineering and operational network solutions. The ISSO will ensure systems comply with Intelligence Community and Department of Defense cybersecurity policies, including ICD 503, RMF, and associated NIST and CNSSI guidance. Key responsibilities include supporting Assessment and Authorization (A&A) activities, maintaining system security posture, and acting as a liaison between technical teams, security disciplines, and government security representatives throughout the system life cycle.

Requirements

Active Top Secret/Sensitive Compartmented Information (TS/SCI) security clearance
8+ years of progressive experience in information assurance, cybersecurity, or Assessment and Authorization (A&A) supporting Department of Defense (DoD) or Intelligence Community (IC) environments
Demonstrated experience supporting Intelligence Community Directive (ICD) 503 Certification and Accreditation (C&A) activities
Strong knowledge of the Risk Management Framework (RMF) and applicable cybersecurity standards and guidance, including NIST SP 800-53 (Security and Privacy Controls), NIST SP 800-37 (Risk Management Framework), NIST SP 800-39 (Managing Information Security Risk), NIST SP 800-30 (Risk Assessment Guide), and CNSSI 1253 (Security Categorization and Control Selection)
Experience preparing, reviewing, and maintaining Assessment and Authorization (A&A) documentation, including System Security Plans (SSPs), Security Assessment Plans (SAPs), Security Assessment Reports (SARs), and Plans of Action and Milestones (POA&Ms)
Familiarity with engineering and operational network environments supporting classified systems
Experience supporting Intelligence Community systems, cybersecurity requirements, and mission operations
Familiarity with multi-domain and high-compliance security environments
Must meet DoD 8140 education and certification requirements
Must maintain all required technical and cybersecurity training as defined by role and system assignment

Nice To Haves

CompTIA Security+ CE
CISSP
CAP (Certified Authorization Professional)
CASP+
CISM

Responsibilities

Implement and oversee cybersecurity and Information Assurance (IA) requirements for assigned systems
Ensure compliance with U.S. Government and IC cybersecurity policies, including ICD 503, DoD Instruction 8510.01 (Risk Management Framework), NIST SP 800-53 and related publications
Prepare, maintain, and manage Assessment and Authorization (A&A) documentation and processes
Support system categorization, control selection, implementation, assessment, and continuous monitoring
Develop and maintain security artifacts such as System Security Plans (SSPs), POA&Ms, Security assessment documentation
Coordinate with IA and cybersecurity team members, other security disciplines (industrial, physical, special programs security), Program personnel and government security representatives
Monitor system security posture and support remediation of identified risks and vulnerabilities
Ensure assigned systems maintain authorization and compliance throughout their life cycle
Maintain required technical and cybersecurity training for assigned systems and role responsibilities
Provide security guidance and recommendations to program and technical leadership