Information Systems Security Officer

Job Description CSCI Consulting is seeking a mid-level Information System Security Officer (ISSO) to support a Department of War mission environment. The ISSO will be responsible for maintaining the cybersecurity authorization posture of assigned information systems, supporting Risk Management Framework (RMF) activities, managing Authorization to Operate (ATO) packages, and ensuring ongoing compliance with DoD cybersecurity requirements. In this role, you will partner cybersecurity engineers, system architects, operations teams, and government stakeholders to maintain secure, compliant, and mission-ready systems. Responsibilities Develop, maintain, and update System Security Plans (SSPs) for assigned systems Manage Plan of Action and Milestones (POA&M) activities from identification through remediation and closure Prepare, coordinate, and submit ATO packages Execute continuous monitoring activities in accordance with approved cybersecurity strategies Utilize Enterprise Mission Assurance Support Service (eMASS) to manage RMF workflows and compliance documentation. Coordinate with Information System Security Engineers (ISSEs), security operations personnel, and system owners to validate security control implementation Develop Security Assessment Plans (SAPs) and support Security Assessment Report (SAR) activities Assist with supply chain risk management documentation and assessments Support cybersecurity architecture and governance initiatives related to RMF implementation and continuous authorization efforts Maintain awareness of evolving DoD cybersecurity policies, directives, and security control requirements Minimum Requirements Active Secret Clearance (TS preferred) 3–5 years of cybersecurity, RMF, or information assurance experience supporting DoD or Federal systems Hands-on experience managing cybersecurity documentation and workflows within eMASS Strong understanding of DoD Risk Management Framework (RMF) processes Working knowledge of NIST SP 800-53 Rev. 5 security controls Experience independently authoring SSPs and managing POA&M remediation activities Strong written and verbal communication skills with the ability to interact effectively with technical and non-technical stakeholders Ability to manage multiple system authorizations and compliance activities simultaneously DoD 8140.03M DCWF Basic Tier Certification; CEH required Creativity and adaptability in problem-solving Ability to work with clients to understand their needs Strong organizational and time-management skills Excellent written and verbal communication skills Professional presence Preferred Skills Experience with eMASSer or similar RMF automation tools Experience supporting cloud, hybrid-cloud, or modernized DoD environments Familiarity with the DoD RMF Knowledge Service and continuous authorization concepts Experience supporting system accreditation efforts within large federal or defense programs Knowledge of cybersecurity governance, risk, and complianc...