Senior Information Systems Security Officer - (ISSO-S)

Job Title: Senior Information Systems Security Officer - (ISSO-S)

Location (On-site, Remote, or Hybrid?): Fort Meade, MD (onsite)

Contract Duration: until 11/13/2026

Seeking a highly experienced Senior ISSO-S. The ISSO-S is responsible for leading the development, implementation, and oversight of cybersecurity policies and procedures for complex, classified systems. This role ensures compliance with federal regulations and industry standards, manages risk, and supports the system lifecycle from design through decommissioning.

Security Governance & Compliance

• Develop, implement, and maintain security policies, procedures, and protocols.
• Ensure compliance with NIST SP 800-53, RMF, FISMA, JSIG, DAAPM, and other applicable frameworks.
• Lead efforts to achieve and maintain Authority to Operate (ATO).

Risk Management & Assessment

• Conduct risk assessments and vulnerability scans using tools like ACAS, SCAP, and STIGs.
• Manage POA&Ms and ensure timely mitigation of identified vulnerabilities.
• Oversee configuration management and change control processes.

System Lifecycle Support

• Integrate security requirements into the System Development Lifecycle (SDLC).
• Maintain and update System Security Plans (SSPs) and other authorization documentation.
• Register and manage systems in eMASS or equivalent platforms.

Incident Response & Monitoring

• Coordinate cybersecurity incident response and reporting.
• Monitor system logs and network traffic for anomalies.
• Investigate security breaches and recommend corrective actions.

Collaboration & Leadership

• Serve as a key advisor to system owners and stakeholders.
• Collaborate with ISSMs, ISSEs, PMs, and AOs to ensure security posture is maintained.
• Provide security awareness training and guidance to users.