Information System Security Officer (ISSO)

Job Overview

We are seeking a highly motivated and detail-oriented Information System Security Officer (ISSO) to lead our organization's cybersecurity initiatives and ensure the integrity, confidentiality, and availability of our information systems. In this pivotal role, you will develop, implement, and oversee security policies aligned with industry standards and regulatory frameworks. Your expertise will help safeguard our IT infrastructure against evolving threats while maintaining compliance with government and industry security requirements. Join us to make a meaningful impact by championing robust security practices and fostering a culture of security awareness across the organization.

Duties

• Develop, maintain, and enforce comprehensive system security plans in accordance with NIST standards and ISO 27001 frameworks.
• Conduct security risk assessments and vulnerability management activities to identify potential threats within cloud infrastructure, on-premises networks, and IT systems.
• Oversee the implementation of security controls such as firewalls (Cisco ASA), intrusion detection systems (IDS), Security Information and Event Management (SIEM) solutions, and encryption protocols to protect network traffic including LAN, WAN, IPsec VPNs, and cloud environments.
• Lead security assessment initiatives including system hardening, penetration testing (using tools like Nmap or Burp Suite), and vulnerability research to proactively identify weaknesses.
• Manage incident response procedures, including threat detection & response, incident recovery, and forensic investigations to minimize impact from cyber threats or data breaches.
• Ensure compliance with regulatory frameworks such as FISMA, FedRAMP, PCI DSS, and standards like ISO 27002 by implementing appropriate governance, risk management (IT risk management), and audit processes.
• Collaborate with cross-functional teams on identity & access management (IAM) solutions using tools like LDAP or RBAC to control user access across systems.

Requirements

• Proven experience in developing and managing system security plans aligned with NIST SP 800-53, ISO 27001/27000 series standards, or similar frameworks.
• Strong knowledge of computer networking concepts including LAN/WAN architecture, routing protocols (OSPF/EIGRP/BGP), network protocols (TCP/IP, DHCP, DNS), and network security devices such as Cisco routers/switches, Cisco ISE, ASA firewalls.
• Hands-on experience with cloud computing platforms like AWS or Azure; familiarity with cloud architecture security best practices is highly desirable.
• Proficiency in cybersecurity tools such as SIEM platforms (Splunk), vulnerability assessment software (Nmap), threat intelligence sources, and network monitoring solutions like SolarWinds or PRTG.
• Ability to perform security analysis, risk assessments, system hardening techniques (including SELinux or operating system configurations), and vulnerability management activities.
• Knowledge of IT governance frameworks including COBIT, ITIL; experience with security policy implementation and compliance programs management.
• Strong scripting skills in Python or Bash are a plus; familiarity with DevOps practices such as CI/CD pipelines enhances effectiveness in dynamic environments.
• Excellent team leadership skills combined with clear communication abilities to coordinate incident management efforts and foster a culture of cybersecurity awareness across the organization.

Join us to be at the forefront of cybersecurity excellence—protecting vital information assets while advancing your career in a dynamic environment committed to innovation and continuous improvement!

Pay: $92,937.50 - $125,000.00 per year

Benefits:

• 401(k)
• Dental insurance
• Flexible spending account
• Health insurance
• Health savings account
• Life insurance
• Paid time off
• Vision insurance

Work Location: In person

Salary : $92,938 - $125,000