What are the responsibilities and job description for the Information Systems Security Officer (ISSO) position at Private Company?
We are hiring an ISSO with CISO Potential
The ISSO we're looking for is a builder, a problem solver, and an effective communicator who thrives as a hands-on practitioner. You'll need the ability to pivot as needed, identifying risks, developing mitigation strategies, and recommending solutions to executive leadership one day, then hardening systems, responding to incidents, reviewing technical configurations, and driving compliance initiatives the next.
This is a demanding, on-site role requiring five-day office presence and the ability to obtain a Top Secret clearance. If you can move seamlessly between the keyboard and the conference room, turning complex cybersecurity challenges into actionable business decisions, don't let this opportunity pass you by. If you're ready to take your ISSO experience to the next level, this role may be for you.
Key Responsibilities
- Serve as the organization’s senior authority on cybersecurity and advise executive leadership on risk and strategy
- Develop, implement, and maintain enterprise-wide security policies, standards, and controls
- Ensure compliance with NIST 800-53, NIST 800-171, CMMC, CMMI, ISO 9K, ISO 20K, ISO 27K, RMF, and other federal requirements
- Manage Authority to Operate (ATO) processes and interface with auditors and assessors
- Conduct risk assessments, vulnerability analysis, and risk mitigation activities
- Oversee incident response planning and execution
- Review proposed system architectures to ensure "Security by Design
- Guide secure architecture across network, cloud, and endpoint environments
- Collaborate with program teams and support security requirements for proposals
Required Qualifications
- Active TS/SCI clearance or ability to obtain
- Bachelor’s degree or equivalent experience
- 10 years of progressive cybersecurity experience
- Experience in a government contracting environment
- Strong knowledge of NIST frameworks, RMF, and federal compliance requirements
- Hands-on experience with network, cloud, and endpoint security
- Ability to operate independently without direct reports, and execute the responsibilities with a hands-on approach
- Excellent communication and stakeholder engagement skills
Preferred Qualifications
- CISSP, CISM, or similar certification
- Familiarity with classified environments and SCIF operations
Salary : $185,000 - $200,000