Job Requirements
Huntsville, AL
Top Secret Polygraph not specified
Career Level not specified
$125,000 - $155,000
Job Description
Senior Information Systems Security Officer (ISSO)
Location: Huntsville, AL
Employment Type: Direct Hire or Contract
Clearance Required: Active Top Secret Eligible / Ability to Maintain Required Access
Position Overview
We are seeking a Senior Information Systems Security Officer (ISSO) to support mission-critical federal and defense systems within a highly secure environment. This individual will serve as the principal cybersecurity advisor to system owners, business stakeholders, and information security leadership, ensuring systems maintain compliance with federal cybersecurity requirements while supporting operational mission objectives.
The ideal candidate has extensive experience supporting Risk Management Framework (RMF) activities, Authorization to Operate (ATO) processes, cybersecurity compliance efforts, vulnerability management, and continuous monitoring programs within complex government environments.
Key Responsibilities
Serve as the primary cybersecurity advisor to the Information System Owner (ISO), Business Process Owner, ISSM, and cybersecurity leadership
Ensure implementation, maintenance, and effectiveness of security controls throughout the system lifecycle
Apply RMF principles and oversee compliance activities supporting authorization and accreditation requirements
Guide systems through the Authority to Operate (ATO) lifecycle, including documentation development, review, submission, and maintenance
Develop, review, maintain, and update cybersecurity documentation including:
System Security Plans (SSPs)
Contingency Plans
Security Assessment documentation
Policies and procedures
Supporting authorization artifacts
Create, update, and manage Plans of Action & Milestones (POA&Ms) based on vulnerability and compliance findings
Conduct security control reviews and validate compliance with applicable federal and organizational requirements
Perform and support network self-inspections, security reviews, and compliance assessments
Track remediation activities and coordinate corrective actions for identified vulnerabilities and deficiencies
Monitor security posture through continuous monitoring activities and vulnerability management processes
Coordinate with engineers, system administrators, developers, and security teams to ensure security requirements are properly implemented
Evaluate cybersecurity risks and provide recommendations to reduce operational and security exposure
Prepare compliance reports, risk assessments, status updates, and executive-level briefings
Support audits, inspections, security assessments, and external reviews
Provide guidance regarding security architecture, operational security requirements, and system hardening activities
Assist with developing and maintaining contingency planning and disaster recovery documentation
Required Qualifications
Bachelor's Degree in Information Assurance, Cybersecurity, Information Technology, Computer Science, Engineering, or a related field
10+ years of cybersecurity, information assurance, ISSO, RMF, or compliance experience
Experience serving as an ISSO, Information Assurance professional, or cybersecurity compliance lead
Strong knowledge of Risk Management Framework (RMF)
Experience supporting Authority to Operate (ATO) activities and security authorization processes
Experience developing and maintaining SSPs, POA&Ms, security assessment documentation, and compliance artifacts
Knowledge of NIST 800-53 security controls and federal cybersecurity requirements
Experience conducting vulnerability assessments and coordinating remediation efforts
Familiarity with Security Test & Evaluation (ST&E) activities
Strong understanding of cybersecurity governance, risk management, and compliance principles
Experience supporting continuous monitoring programs and audit readiness initiatives
Excellent written, verbal, organizational, and interpersonal communication skills
Ability to work independently and provide guidance to technical and non-technical stakeholders
Preferred Qualifications
Experience using Xacta or similar GRC platforms
Experience using eMASS or other federal compliance management systems
Experience supporting DoD, Intelligence Community, or other federal environments
Experience supporting classified systems and secure operational environments
Experience with vulnerability management tools and compliance reporting solutions
Experience performing security control assessments and risk analysis activities
Familiarity with incident response, auditing, and cybersecurity operations
Knowledge of DISA STIGs, NIST standards, and federal security policies
One or more of the following certifications preferred:
CISSP
CompTIA Security+
CASP+
CISM
CAP
SecurityX
Other DoD 8570/8140 compliant cybersecurity certifications
Desired Skills
RMF
ATO
Xacta
eMASS
NIST 800-53
SSP Development
POA&M Management
Vulnerability Management
ACAS
Nessus
STIG Compliance
Security Assessments
Continuous Monitoring
Risk Analysis
Audit Readiness
Information Assurance
Cybersecurity Governance
Compliance Management
What You'll Bring
Strong cybersecurity leadership within complex environments
Ability to balance security requirements with mission objectives
Experience guiding systems through accreditation and compliance processes
Strong documentation and communication skills
Ability to collaborate effectively with system owners, engineers, security personnel, and executive leadership
Commitment to maintaining secure, compliant, and resilient information systems supporting critical operations
Location: Huntsville, AL
Employment Type: Direct Hire or Contract
Clearance Required: Active Top Secret Eligible / Ability to Maintain Required Access
Position Overview
We are seeking a Senior Information Systems Security Officer (ISSO) to support mission-critical federal and defense systems within a highly secure environment. This individual will serve as the principal cybersecurity advisor to system owners, business stakeholders, and information security leadership, ensuring systems maintain compliance with federal cybersecurity requirements while supporting operational mission objectives.
The ideal candidate has extensive experience supporting Risk Management Framework (RMF) activities, Authorization to Operate (ATO) processes, cybersecurity compliance efforts, vulnerability management, and continuous monitoring programs within complex government environments.
Key Responsibilities
Serve as the primary cybersecurity advisor to the Information System Owner (ISO), Business Process Owner, ISSM, and cybersecurity leadership
Ensure implementation, maintenance, and effectiveness of security controls throughout the system lifecycle
Apply RMF principles and oversee compliance activities supporting authorization and accreditation requirements
Guide systems through the Authority to Operate (ATO) lifecycle, including documentation development, review, submission, and maintenance
Develop, review, maintain, and update cybersecurity documentation including:
System Security Plans (SSPs)
Contingency Plans
Security Assessment documentation
Policies and procedures
Supporting authorization artifacts
Create, update, and manage Plans of Action & Milestones (POA&Ms) based on vulnerability and compliance findings
Conduct security control reviews and validate compliance with applicable federal and organizational requirements
Perform and support network self-inspections, security reviews, and compliance assessments
Track remediation activities and coordinate corrective actions for identified vulnerabilities and deficiencies
Monitor security posture through continuous monitoring activities and vulnerability management processes
Coordinate with engineers, system administrators, developers, and security teams to ensure security requirements are properly implemented
Evaluate cybersecurity risks and provide recommendations to reduce operational and security exposure
Prepare compliance reports, risk assessments, status updates, and executive-level briefings
Support audits, inspections, security assessments, and external reviews
Provide guidance regarding security architecture, operational security requirements, and system hardening activities
Assist with developing and maintaining contingency planning and disaster recovery documentation
Required Qualifications
Bachelor's Degree in Information Assurance, Cybersecurity, Information Technology, Computer Science, Engineering, or a related field
10+ years of cybersecurity, information assurance, ISSO, RMF, or compliance experience
Experience serving as an ISSO, Information Assurance professional, or cybersecurity compliance lead
Strong knowledge of Risk Management Framework (RMF)
Experience supporting Authority to Operate (ATO) activities and security authorization processes
Experience developing and maintaining SSPs, POA&Ms, security assessment documentation, and compliance artifacts
Knowledge of NIST 800-53 security controls and federal cybersecurity requirements
Experience conducting vulnerability assessments and coordinating remediation efforts
Familiarity with Security Test & Evaluation (ST&E) activities
Strong understanding of cybersecurity governance, risk management, and compliance principles
Experience supporting continuous monitoring programs and audit readiness initiatives
Excellent written, verbal, organizational, and interpersonal communication skills
Ability to work independently and provide guidance to technical and non-technical stakeholders
Preferred Qualifications
Experience using Xacta or similar GRC platforms
Experience using eMASS or other federal compliance management systems
Experience supporting DoD, Intelligence Community, or other federal environments
Experience supporting classified systems and secure operational environments
Experience with vulnerability management tools and compliance reporting solutions
Experience performing security control assessments and risk analysis activities
Familiarity with incident response, auditing, and cybersecurity operations
Knowledge of DISA STIGs, NIST standards, and federal security policies
One or more of the following certifications preferred:
CISSP
CompTIA Security+
CASP+
CISM
CAP
SecurityX
Other DoD 8570/8140 compliant cybersecurity certifications
Desired Skills
RMF
ATO
Xacta
eMASS
NIST 800-53
SSP Development
POA&M Management
Vulnerability Management
ACAS
Nessus
STIG Compliance
Security Assessments
Continuous Monitoring
Risk Analysis
Audit Readiness
Information Assurance
Cybersecurity Governance
Compliance Management
What You'll Bring
Strong cybersecurity leadership within complex environments
Ability to balance security requirements with mission objectives
Experience guiding systems through accreditation and compliance processes
Strong documentation and communication skills
Ability to collaborate effectively with system owners, engineers, security personnel, and executive leadership
Commitment to maintaining secure, compliant, and resilient information systems supporting critical operations
group id: kforcecx
We offer roles across all three clearance levels: Confidential, Secret and Top Secret. With a Top Secret Facilities clearance, a proven subcontractor track record and a deep understanding of agencies across Defense, Intelligence, Homeland, Justice and Federal Civilian Sectors, Kforce brings more than 20 years of experience to supporting critical missions at federal, state and local levels.
