Information Systems Security Officer (ISSO)

Develop and maintain the IT System Security Compliance Schedule covering 12-month intervals, capturing POA&M Action Items, ITSS reports, Change Control Board Meetings, and vulnerability scan updates. Advise systems owners on security posture and perform assessment and authorization (A&A) activities on classified and unclassified networks in accordance with the DOJ/NIST Risk Management Framework. Develop artifacts for all control families, including Security Categorization, Systems Security Plans, and contingency planning, while conducting continuous monitoring of multiple networks and systems. Prepare risk analysis reports, validate Security Assessment Reports, and manage the Plan of Action and Milestones lifecycle. Support Incident Response, Contingency activities, and security impact analysis on configuration change requests. Requires Secret clearance, a Bachelor's degree, and 8+ years of experience with CISSP, CISA, or CISM certifications.