ISSO Manager

Job Description

Tyto Athene is searching for an Information Systems Security Officer (ISSO) to support our Defense Health Agency (DHA) customer in Aurora, CO. This contract is accountable for the management and operation of the integrated set of financial management, acquisition support, contract management, and contract operations applications supporting the Procure-to-Pay, Budget-to-Report, and Order-to-Cash processes. This ISSO role is critical in safeguarding the organization's IT infrastructure and maintaining the confidentiality, integrity, and availability of information.

Responsibilities:

Security Management :

• Develop, implement, and enforce information security policies and procedures
• Ensure compliance with security standards, regulations, and best practices (e.g., NIST, FISMA, HIPAA)
• Monitor and assess the effectiveness of the security program and make improvements as needed

Risk Assessment and Mitigation :

• Conduct security risk assessments to identify vulnerabilities in systems, applications, and networks.
• Provide recommendations to mitigate risks and protect organizational assets.
• Conduct regular vulnerability scans, security assessments, and audits.

Incident Response and Monitoring :

• Oversee the detection, response, and management of security incidents and breaches.
• Analyze and investigate security incidents, identify root causes, and implement corrective actions.
• Coordinate with the Incident Response Team (IRT) and other stakeholders to resolve security threats.

System Security Compliance :

• Ensure that security policies and procedures are compliant with legal and regulatory requirements
• Perform regular compliance audits to ensure systems meet security standards.
• Provide guidance to ensure the organization's systems meet security certification requirements (e.g., ISO 27001, SOC 2)

Security Awareness and Training :

• Develop and conduct security training programs for staff and users to promote security best practices
• Raise awareness about phishing, social engineering, and other common security threats.
• Provide security guidance and recommendations to staff on how to safely handle sensitive information

Collaboration and Reporting :

• Collaborate with IT teams, management, and other departments to ensure the security of organizational systems
• Prepare regular reports on the status of the organization's security posture and any security incidents
• Advise senior leadership on security risks and mitigation strategies.

Resource Management:

• Responsible for managing and proving oversight to the Cybersecurity Compliance and Continuous Monitoring team

Required:

• Bachelor's degree in Information Technology, Cybersecurity, or a related field
• 8140 Compliant Certifications, such as CISSP, CISM, GSLC, CISA, or Security+ CE
• Proven experience in information security, risk management, or IT operations.
• Strong knowledge of security frameworks (e.g., NIST, ISO 27001, COBIT)
• Experience with security tools and technologies (e.g., firewalls, intrusion detection systems, encryption, and vulnerability scanning)
• Familiarity with regulatory requirements such as FISMA, HIPAA, and GDPR
• Experience performing Continuous Cybersecurity Monitoring, Intrusion Detection and Cyber Incident Response
• 7-10+ years of IT experience, with at least 5 years in cybersecurity or information assurance

Desired:

• Cybersecurity Service Provider (CSSP) experience is preferred.
• Familiarity with Defense Health Agency, DoD, or federal agencies are highly desired
• RMF or CAP certification is a plus

Clearance:

• Secret Clearance Required

Location:

• Work is located 100% on government site in Aurora, CO

Compensation:

• Compensation is unique to each candidate and relative to the skills and experience they bring to the position. The salary range for this position is typically $170K-$190K. This does not guarantee a specific salary as compensation is based upon multiple factors such as education, experience, certifications, and other requirements, and may fall outside of the above-stated range.

Benefits:

• Highlights of our benefits include Health/Dental/Vision, 401(k) match, Flexible Time Off, Paid holidays, STD/LTD/Life Insurance, Referral Bonuses, professional development reimbursement, and maternity/paternity leave

Clearances Required

Secret

Additional Information

Tyto Athene is a trusted leader in IT services and solutions, delivering mission-focused digital transformation that drives measurable success. Our expertise spans four core technology domains-Network Modernization, Hybrid Cloud, Cybersecurity, and Enterprise IT-empowering our clients with cutting-edge solutions tailored to their evolving needs. With over 50 years of experience, Tyto Athene proudly support Defense, Intelligence, Space, National Security, Civilian, Health, and Public Safety clients across the United States and worldwide.

At Tyto Athene, we believe that success starts with our people. We foster a collaborative, innovative, and mission-driven environment where every team member plays a critical role in shaping the future of technology. Are you ready to join #TeamTyto?

Tyto Athene, LLC is an Equal Opportunity Employer; all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, [sexual orientation, gender identity,] national origin, disability, status as a protected veteran, or any characteristic protected by applicable law.