Senior Information System Security Officer (ISSO)
Company Overview:
Join a fast-growing company highly experienced in cyber security, cloud computing, virtualization, big data analytics, and project management! IMTS offers competitive compensation, excellent benefits including tuition reimbursement and employer-contributed 401K, and referral bonuses. We work with the best customers on-site at top government agencies.
Job Title: Senior Information System Security Officer (ISSO)
Primary Location: Vienna, VA
Clearance: Top-Secret (TS)
Position Summary:
We are seeking a qualified Senior Information System Security Officer (ISSO) to support federal government operations in Vienna, VA. The ISSO serves as the primary security advisor to the Information System Owner (SO), Business Process Owner, and the Chief Information Security Officer (CISO) / Information System Security Manager (ISSM) on all matters involving the security of assigned information systems.
The ISSO will be responsible for the implementation, documentation, and continuous monitoring of security controls, supporting system accreditation efforts, and ensuring compliance with federal cybersecurity standards under the Risk Management Framework (RMF).
Responsibilities:
- Advise SO, CISO/ISSM, and other key stakeholders on cybersecurity compliance and risk mitigation strategies.
- Implement and maintain security controls in alignment with NIST SP 800-53 and federal standards.
- Develop, edit, and maintain ATO (Authority to Operate) documentation including System Security Plans (SSPs), Security Assessment Reports (SARs), Contingency Plans, and related artifacts.
- Conduct vulnerability assessments and coordinate self-inspections of systems.
- Create and manage Plans of Action and Milestones (POA&Ms) based on vulnerability data; maintain accuracy in the system of record (e.g., eMASS).
- Provide physical and logical security oversight for information systems and data.
- Report on the effectiveness of data security measures and recommend improvements.
- Assist in preparing for audits, assessments, and inspections.
- Coordinate with cross-functional teams to ensure a consistent and compliant cybersecurity posture.
Required Qualifications:
- Active Top Secret clearance is required.
- U.S. Citizenship is required.
- Bachelor’s degree in Cybersecurity, Information Technology, or a related field and at least 8 years of relevant experience. In lieu of bachelor’s degree, 12 years of relevant experience in information security or system accreditation roles.
- Hands-on experience supporting system accreditation and certification (ATO) efforts within the federal space.
- Working knowledge of:
- NIST SP 800-53 controls and the Risk Management Framework (RMF)
- Federal Information Security Management Act (FISMA) requirements
- ATO package development and lifecycle management
- Familiarity with vulnerability management and POA&M tracking.
- Strong written and verbal communication skills.
Preferred Qualifications:
- DoD 8570/8140-compliant certification such as Security+, CAP, CISSP, or CISM.
- Experience supporting agencies such as DOJ, FBI, DoD, or other federal civilian agencies.
- Familiarity with eMASS or other government compliance management tools.
- Experience with cloud security controls (AWS GovCloud, Azure Government, etc.).
IMTS is an equal opportunity/affirmative action employer. All qualified applicants will receive consideration for employment without regard to sex, gender identity, sexual orientation, race, color, religion, national origin, disability, protected veteran status, age, or any other characteristic protected by law.