Senior Information Systems Security Officer (Clearance Required)

Lead development, implementation, and oversight of cybersecurity policies and procedures for complex, classified systems. Ensure compliance with federal regulations and industry standards; manage risk; support the system lifecycle from design through decommissioning. Responsibilities include developing and maintaining security policies, ensuring RMF/NIST/FISMA/JSIG/DAAPM compliance, achieving and maintaining Authority to Operate (ATO), conducting risk assessments and vulnerability scans (ACAS/SCAP/STIGs), managing POA&Ms, overseeing configuration management, integrating security requirements into SDLC, maintaining SSPs and authorization documentation, registering systems in eMASS, coordinating incident response, monitoring logs and network traffic, investigating breaches, and providing security guidance to stakeholders. Collaboration with ISSMs, ISSEs, PMs, and AOs to maintain security posture and delivering security awareness training.