USAF - Information Systems Security Officer (ISSO)
On-siteEllsworth, Maine, United States
Job Summary
Execute and coordinate the RMF lifecycle for assigned Air Force systems, including security categorization, control selection, implementation, validation, and continuous monitoring. Develop, update, and sustain authorization artifacts such as SSPs, RARs, and POA&Ms while maintaining accurate records in eMASS and ITIPS. Conduct vulnerability assessments, risk analysis, and remediation tracking to ensure system compliance with federal and DoD cybersecurity policies. Coordinate with system owners and engineers to collect evidence, document gaps, and facilitate corrective actions. Prepare assessment findings, risk analysis, and decision-support materials for authorization decision staff packages and leadership briefings. Maintain system inventories, authorization boundaries, and expiration dates while supporting COOP and disaster recovery activities.
Required Qualifications
- Active TS/SCI SSBI clearance
- B.S. Computer Science, Information Technology, or a related field
- 6+ years of RMF/Cybersecurity experience
- Demonstrated experience performing ISSO, RMF, Assessment and Authorization, or security-compliance duties for federal or DoD information systems
- Working knowledge of the full RMF lifecycle, security controls, control assessment, authorization decisions, ongoing authorization, and continuous monitoring
- Experience developing and maintaining SSPs, RARs, POA&Ms, assessment findings, implementation evidence, inventories, and system authorization packages
- Hands-on proficiency with eMASS and ITIPS or comparable federal authorization-management systems
- Experience conducting vulnerability analysis, documenting risk, developing remediation plans, tracking corrective action, and validating closure evidence
- Ability to interpret federal, DoD, and Air Force cybersecurity requirements and apply them consistently to assigned systems
- Ability to assess security-control evidence, identify gaps or weaknesses, determine risk implications, and recommend practical corrective actions
- Strong analytical, technical-writing, briefing, stakeholder-coordination, quality-control, and records-management skills
- Ability to manage multiple systems, authorization actions, recurring reports, and deadlines while maintaining artifact currency and accuracy
- Active DoD 8570 IAM Level III and DoD 8140 System Administrator certification
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.