Information Systems Security Officer

Virginia Commercial Space•Wallops Island, VA

4d•$96,385 - $125,760•Onsite

About The Position

The Information Systems Security Officer (ISSO) ensures the security and compliance of information and operational systems used by the Virginia Commercial Space Flight Authority (VA Space). The role supports implementing, monitoring, and enforcing security controls to protect data, systems, and networks from cyber threats while ensuring compliance with regulatory and organizational requirements. This position is term limited to 3–5 years, dependent on continued funding. It is performed in a typical office setting and is not eligible for telework. Some travel to other counties is required.

Requirements

Bachelor’s degree in Information Security, Computer Science, Information Technology, or a related field, or equivalent experience.
3–7+ years of experience in information security or related IT roles.
5+ years of experience with Microsoft Active Directory and Azure cloud security.
Working knowledge of security frameworks such as NIST RMF, FISMA, or ISO standards.
Experience with vulnerability management tools and security monitoring systems.
Strong understanding of network, system, and application security principles.
Knowledge of SIEM tools and incident response processes.
Current security clearance or ability to obtain and maintain one.
Experience supporting federal or regulated environments.
CISSP, CISM, Security+ certification, or equivalent required.
Valid driver’s license required when operating a vehicle on agency business.
Effective verbal and written communication skills.
Strong analytical and problem-solving skills.
Organization and attention to detail.
Proficiency with Microsoft Office or related programs.
Time management skills and a proven ability to meet deadlines.
Professionalism in handling confidential and sensitive issues.
Ability to obtain and maintain eligibility for issuance of a NASA credential.
Ability to pass a pre-employment background check and drug test.

Nice To Haves

Project or Agile certifications preferred.

Responsibilities

Implement and maintain security controls in accordance with organizational policies and frameworks such as NIST and CMMC 2.0.
Conduct system security assessments, vulnerability scans, and risk analyses.
Support the Authorization to Operate (ATO) process, including documentation and continuous monitoring.
Monitor security systems and respond to incidents, ensuring timely mitigation and reporting.
Review system configurations, patches, and updates for compliance with security standards.
Collaborate with IT, engineering, and compliance teams to integrate security into system lifecycles.
Maintain system security documentation, including System Security Plans (SSPs), POA&Ms, and risk assessments.
Provide security awareness guidance and training to system users and stakeholders.
Assist with audits and inspections by internal and external entities.
Track and report security posture and metrics to leadership.
Perform other duties as assigned.