Information System Security Officer (ISSO)

{
  "content_hash": "58c0f86a851f185648fc7c3d72d64d5e0ea5ab26a24c1b7893f41501fb56315c",
  "source_hash": "99c7c9d71a5af3e68648633c08cd274029faf2632a1ad00f46d6477e641c9799",
  "last_changed_at": "2026-05-29T07:07:35.330Z",
  "active_status": "active"
}

{
  "language": "en",
  "location": {
    "raw": "Fort Belvoir, VA",
    "city": "Fort Belvoir",
    "region": "VA",
    "country": "United States",
    "is_remote": false,
    "confidence": 0.9
  },
  "salary_max": null,
  "salary_min": null,
  "inferred_at": "2026-06-06T07:57:05.594Z",
  "launch_scope": {
    "reason": "english_us_canada",
    "included": true,
    "language": "en",
    "location": {
      "raw": "Fort Belvoir, VA",
      "city": "Fort Belvoir",
      "region": "VA",
      "country": "United States",
      "is_remote": false,
      "confidence": 0.9
    },
    "countries": [
      "United States"
    ]
  },
  "remote_policy": null,
  "salary_period": null,
  "workplace_type": "on_site",
  "salary_currency": null
}

{}

{
  "lists": [
    {
      "text": "Key Responsibilities",
      "content": "<div>\n<div>\n<p><span data-contrast=\"auto\">Perform the duties of an Information System Security Officer (ISSO) as defined in AR 25-2, DA 25-2-14, and the NIST SP 800-53 security controls when the&nbsp;organizationally-defined&nbsp;personnel&nbsp;includes&nbsp;the ISSO</span><span data-ccp-props=\"{}\">&nbsp;</span></p>\n</div>\n<div>\n<p><span data-contrast=\"auto\">Actively manages the organization’s&nbsp;eMASS&nbsp;records which&nbsp;includes&nbsp;but&nbsp;is&nbsp;not limited to:</span><span data-ccp-props=\"{}\">&nbsp;</span></p>\n</div>\n<div>\n<p><span data-contrast=\"auto\">Validates security controls including associated artifacts</span><span data-ccp-props=\"{}\">&nbsp;</span></p>\n</div>\n<div>\n<p><span data-contrast=\"auto\">Assesses security scan results and STIGs as&nbsp;required</span><span data-ccp-props=\"{}\">&nbsp;</span></p>\n</div>\n<div>\n<p><span data-contrast=\"auto\">Performs POA&amp;M updates, tracking, and resolution</span><span data-ccp-props=\"{}\">&nbsp;</span></p>\n</div>\n<div>\n<p><span data-contrast=\"auto\">Leads the continuous monitoring activities of the organization</span><span data-ccp-props=\"{}\">&nbsp;</span></p>\n</div>\n<div>\n<p><span data-contrast=\"auto\">Manages the day-to-day activities and the professional development of the Cybersecurity Analysts</span><span data-ccp-props=\"{}\">&nbsp;</span></p>\n</div>\n<div>\n<p><span data-contrast=\"auto\">Collaborates with the O-ISSM on all assessment and authorization activities to ensure the information systems&nbsp;maintain&nbsp;an authority to&nbsp;operate&nbsp;(ATO) on all applicable DoD/IC networks</span><span data-ccp-props=\"{}\">&nbsp;</span></p>\n</div>\n<div>\n<p><span data-contrast=\"auto\">Maintain up-to-date status on all assigned systems and communicate status to the Government leads</span><span data-ccp-props=\"{}\">&nbsp;</span></p>\n</div>\n<div>\n<p><span data-contrast=\"auto\">Maintain complete records of&nbsp;communications,&nbsp;submit&nbsp;written status reports as&nbsp;required, perform peer-review as directed, and attend weekly meetings</span><span data-ccp-props=\"{}\">&nbsp;</span></p>\n</div>\n<div>\n<p><span data-contrast=\"auto\">Correspond with the Government customer and system administrators to communicate any unacceptable risks&nbsp;identified&nbsp;and correct deficient POA&amp;M items to meet DoD and IC standards</span><span data-ccp-props=\"{}\">&nbsp;</span></p>\n</div>\n<div>\n<p><span data-contrast=\"auto\">Coordinate with the Security Control Assessor (SCA) to perform analysis of the overall risk level the system poses to enterprise networks and to mission data</span><span data-ccp-props=\"{}\">&nbsp;</span></p>\n</div>\n<div>\n<p><span data-contrast=\"auto\">Create and&nbsp;maintain&nbsp;cybersecurity policies and standards</span><span data-ccp-props=\"{}\">&nbsp;</span></p>\n</div>\n<div>\n<p><span data-contrast=\"auto\">Ensure that cybersecurity plans, controls, processes, standards, policies, and procedures are aligned with cybersecurity standards</span><span data-ccp-props=\"{}\">&nbsp;</span></p>\n</div>\n<div>\n<p><span data-contrast=\"auto\">Ensures security scans and STIG checklists are updated according to DA G2 policy</span><span data-ccp-props=\"{}\">&nbsp;</span></p>\n</div>\n<div>\n<p><span data-contrast=\"auto\">Produces actionable, risk-based reports on security assessment results</span><span data-ccp-props=\"{}\">&nbsp;</span></p>\n</div>\n<div>\n<p><span data-contrast=\"auto\">Assists&nbsp;with vulnerability remediation when necessary</span><span data-ccp-props=\"{}\">&nbsp;</span></p>\n</div>\n<div>\n<p><span data-contrast=\"auto\">Develops and&nbsp;maintains&nbsp;security plans and security testing plans</span><span data-ccp-props=\"{}\">&nbsp;</span></p>\n</div>\n<div>\n<p><span data-contrast=\"auto\">Periodically updates and improves risk models; metrics; reports; processes; and activities to stay compliant with evolving DoD and IC standards</span><span data-ccp-props=\"{}\">&nbsp;</span></p>\n</div>\n<div>\n<p><span data-contrast=\"auto\">Ensures the user community understands and adheres to necessary procedures to&nbsp;maintain&nbsp;security posture of the information systems</span><span data-ccp-props=\"{}\">&nbsp;</span></p>\n</div>\n<div>\n<p><span data-contrast=\"auto\">Provides guidance in the creation and maintenance of Standard Operating Procedures (SOPs); Tactics, Techniques, and Procedures (TTPs); and other similar documentation</span><span data-ccp-props=\"{}\">&nbsp;</span></p>\n</div>\n</div>"
    },
    {
      "text": "Required Experience/Clearance",
      "content": "<ul style=\"list-style-type: disc;\">\n<li>\n<div>\n<p><span data-contrast=\"auto\">PhD in an area of Science, Technology, Engineering or Mathematics with at least:&nbsp;</span></p>\n<p><span data-contrast=\"auto\">&nbsp;15 years’ experience as a cybersecurity professional </span></p>\n<p><span data-contrast=\"auto\">OR&nbsp;</span></p>\n<p><span data-contrast=\"auto\">a Master's degree in an area of Science, Technology, Engineering or Mathematics with at least 18 years’ experience as a cybersecurity professional </span></p>\n<p><span data-contrast=\"auto\">OR&nbsp;</span></p>\n<p><span data-contrast=\"auto\">a Bachelor’s degree in an area of Science, Technology, Engineering or Mathematics with at least 20 years’ experience as a cybersecurity professional</span><span data-ccp-props=\"{}\">&nbsp;</span></p>\n</div>\n<div>\n<p><span data-contrast=\"auto\">Active TS security clearance and eligible for SCI and NATO&nbsp;read-on&nbsp;prior to starting work</span><span data-ccp-props=\"{}\">&nbsp;</span></p>\n</div>\n<div>\n<p><span data-contrast=\"auto\">Meet the DoD requirements for a privileged user on a TS/SCI information system prior to starting work - DoD 8140 / 8570.01-m requirements</span><span data-ccp-props=\"{}\">&nbsp;</span></p>\n</div>\n<div>\n<p><span data-contrast=\"auto\">15+ years’ experience with the assessment and accreditation activities of national security systems (NSSs)</span><span data-ccp-props=\"{}\">&nbsp;</span></p>\n</div>\n<div>\n<p><span data-contrast=\"auto\">10+ years’ experience validating system security controls</span><span data-ccp-props=\"{}\">&nbsp;</span></p>\n</div>\n<div>\n<p><span data-contrast=\"auto\">10+ years’ experience with vulnerability management</span><span data-ccp-props=\"{}\">&nbsp;</span></p>\n</div>\n<div>\n<p><span data-contrast=\"auto\">10+ years’ experience with DISA Security Technical Implementation Guides (STIGs), DISA Security Requirements Guide (SRG), and vendor-specific security guides</span><span data-ccp-props=\"{}\">&nbsp;</span></p>\n</div>\n<div>\n<p><span data-contrast=\"auto\">8+ years’ experience with RMF and eMASS</span><span data-ccp-props=\"{}\">&nbsp;</span></p>\n</div>\n<div>\n<p><span data-contrast=\"auto\">5+ years’ experience with POA&amp;M tracking and resolution</span><span data-ccp-props=\"{}\">&nbsp;</span></p>\n</div>\n<div>\n<p><span data-contrast=\"auto\">3+ years’ experience performing the continuous monitoring of system security controls</span></p>\n</div>\n</li>\n</ul>"
    },
    {
      "text": "Desired Experience",
      "content": "<div>\n<div>\n<p><span data-contrast=\"auto\">10 years’ experience as an ISSO on Army Intel programs</span><span data-ccp-props=\"{}\">&nbsp;</span></p>\n</div>\n<div>\n<p><span data-contrast=\"auto\">2 years’ experience with AC2SP tenant assessment and accreditation activities</span><span data-ccp-props=\"{}\">&nbsp;</span></p>\n</div>\n</div>"
    }
  ],
  "country": "US",
  "createdAt": 1777905980462,
  "updatedAt": null,
  "categories": {
    "team": "National Security",
    "location": "Fort Belvoir, VA",
    "commitment": "Full-Time",
    "department": "National Security",
    "allLocations": [
      "Fort Belvoir, VA"
    ]
  },
  "salaryRange": null,
  "workplaceType": "onsite"
}