| Location | Washington, DC |
Responsibilities: for the Senior Information Systems Security Officer include: Conduct security assessments, evaluate compliance posture, and manage RMF activities supporting accreditation efforts. Develop and maintain SSPs, POA&Ms, accreditation documentation, and security artifacts within XACTA. Coordinate IATT and ATO activities with stakeholders, system owners, and Authorizing Officials. Implement, assess, and monitor NIST 800-53 security controls while supporting audit and assessment events. Collaborate with engineers, developers, administrators, and security personnel to maintain compliance and implement risk mitigation strategies, including Zero Trust principles. Required Qualifications for the Senior Information Systems Security Officer include: 18+ years of cybersecurity, security engineering, systems engineering, or related experience. Experience with RMF, accreditation processes, and compliance management. Experience using XACTA and supporting IATT and ATO activities. Proficiency with Splunk. Experience implementing and assessing NIST 800-53 security controls. Experience with ICD 503 and related security frameworks. Experience developing and maintaining SSPs, POA&Ms, SAPs, and assessment documentation. Prior ISSO or ISSE experience. Current Security+ or equivalent IAT Level II/III certification. Active TS/SCI with Active Polygraph. Preferred Qualifications for the Senior Information Systems Security Officer include: Experience leading cybersecurity programs and enterprise security initiatives. Strong customer-facing, stakeholder management, and leadership skills. Experience working with ISSMs, SCAs, system owners, and Authorizing Officials. Knowledge of cloud-native security environments. Experience implementing Zero Trust architectures. Qualifications: for the Senior Information Systems Security Officer include: 18+ years of cybersecurity, security engineering, systems engineering, or related experience. Experience with RMF, accreditation processes, and compliance management. Experience using XACTA and supporting IATT and ATO activities. Proficiency with Splunk. Experience implementing and assessing NIST 800-53 security controls. Experience with ICD 503 and related security frameworks. Experience developing and maintaining SSPs, POA&Ms, SAPs, and assessment documentation. Prior ISSO or ISSE experience. Current Security+ or equivalent IAT Level II/III certification. Active TS/SCI with Active Polygraph. Preferred Qualifications for the Senior Information Systems Security Officer include: Experience leading cybersecurity programs and enterprise security initiatives. Strong customer-facing, stakeholder management, and leadership skills. Experience working with ISSMs, SCAs, system owners, and Authorizing Officials. Knowledge of cloud-native security environments. Experience implementing Zero Trust architectures.