Information Systems Security Officer

Title: Information Systems Security Officer (ISSO)Location: Clarksburg, MD (Onsite)Type: Direct HireCompensation: $150,000/year (salary)Schedule: 40 hours/weekClearance Required: Active TS/SCI with Polygraph (required to start)Citizenship: U.S. Citizenship required

Role Overview

We’re hiring an Information Systems Security Officer (ISSO) to support mission-critical, classified environments. In this role, you’ll help ensure information systems stay compliant throughout the Risk Management Framework (RMF) lifecycle—supporting ATO packages, continuous monitoring, assessments, and audit readiness. You’ll partner closely with technical teams and security stakeholders to drive secure, compliant system operations.

What You’ll Do (Key Responsibilities)

• Support the full RMF lifecycle for classified information systems
• Build and maintain security authorization packages and RMF documentation
• Coordinate and support Authority to Operate (ATO) efforts
• Perform/control security assessments, compliance reviews, and control validation
• Track vulnerabilities, findings, and remediation activities (POA&Ms, etc.)
• Support Continuous Monitoring (ConMon) and ongoing security activities
• Review scan results/configurations to ensure alignment with security requirements
• Work with system teams to implement/maintain required security controls
• Participate in audits, inspections, and cybersecurity compliance reviews
• Provide risk-based recommendations to improve security posture

Required Qualifications (Must-Haves)

• Active TS/SCI with Polygraph
• U.S. Citizen
• Experience in ISSO / Information Assurance / cybersecurity compliance in classified environments
• Strong knowledge of RMF and the security authorization process (ATO)
• Familiarity with:
  • NIST SP 800-53 (Rev 3 and/or Rev 5)
  • NIST SP 800-37
• Experience with compliance/configuration scanning and assessment workflows
• Strong communication skills (written+ verbal) and comfort working cross-functionally

Tools/Platforms (Experience With)

Experience with RMF/cyber compliance tools such as:

• XACTA
• LATTE / ART
• BISCOTTI
• WATCHCAT
• STE (Experience with similar tools is also valuable.)

Documentation You Should Be Comfortable With

Hands-on experience developing/reviewing security documentation such as:

• SSP, POA&M, SAR, RAR
• CMP, CP, BIA
• SPFs / exceptions and related artifacts
• AARs and audit support documentation

Preferred / Nice-to-Have

• Prior support of classified government systems
• Experience partnering with ISSMs, System Owners, Security Control Assessors, and Authorizing Officials
• Familiarity with vulnerability remediation and system administration security concepts
• Certifications like Security+, CISSP, CAP, CASP+, or CISM

System One, and its subsidiaries including Joulé and Mountain Ltd., are leaders in delivering outsourced services and workforce solutions across North America. We help clients get work done more efficiently and economically, without compromising quality. System One not only serves as a valued partner for our clients, but we offer eligible employees health and welfare benefits coverage options including medical, dental, vision, spending accounts, life insurance, voluntary plans, as well as participation in a 401(k) plan.

System One is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, age, national origin, disability, family care or medical leave status, genetic information, veteran status, marital status, or any other characteristic protected by applicable federal, state, or local law.

#M-1 #LI- Ref: #851-Rockville-S1