Senior Cyber Security / Information System Security Officer (ISSO)

CGI•Huntsville, AL

4d•Onsite

About The Position

CGI Federal is seeking a Senior Cyber Security / Information System Security Officer (ISSO) to provide advanced security oversight, compliance monitoring, and protection of mission critical systems within a major federal modernization program. The Senior ISSO ensures all systems, applications, data flows, and development environments adhere to federal security policies, controls, accreditation requirements, and continuous monitoring standards. This role partners with engineering, cloud, DevSecOps, QA, and operations teams to ensure security is embedded across all phases of delivery.

Requirements

Must have an Active Top Secret Security Clearance
U.S. Citizenship
Bachelor's degree and 8+ years of experience in cybersecurity, ISSO support, or security engineering
Strong understanding of federal security frameworks and compliance requirements
Experience performing vulnerability scanning, interpreting findings, and driving remediation
Proficiency with identity/access management, system hardening, logging, and auditing
Strong communication skills for partnering with technical teams and leadership

Nice To Haves

Experience supporting federal modernization or national security programs
Familiarity with cloud environments (AWS strongly preferred)
Experience with DevSecOps practices, CI/CD pipeline security, and automated scanning
Security certifications such as CISSP, CISM, Security+, or similar

Responsibilities

Implement and enforce federal security policies, controls, standards, and procedures
Maintain security documentation including SSPs, POA&Ms, security checklists, and control evidence
Support continuous monitoring activities, vulnerability scanning, and remediation tracking
Ensure systems, applications, and cloud environments remain compliant with applicable frameworks
Guide teams on secure architectures, data handling requirements, and system hardening
Validate security controls across development, testing, migration, and operational environments
Monitor audit logs, access controls, authentication mechanisms, and system configurations
Support accreditation processes, assessments, and readiness activities
Work closely with engineers, cloud teams, DevSecOps, QA automation, data migration, and product leads
Provide security requirements, design guidance, and risk advisories during planning and development
Participate in sprint ceremonies, technical reviews, and release readiness cycles
Communicate risks, incidents, and mitigation strategies to leadership
Identify security risks and coordinate mitigation strategies across teams
Support incident response activities, root cause analysis, and corrective action tracking
Lead remediation efforts for findings from scans, audits, or assessments
Maintain accurate and current security documentation for audits, accreditation, and compliance
Generate reports summarizing vulnerabilities, remediation status, and security posture
Support program leadership with security metrics, dashboards, and risk summaries