ISSO Lead

Zachary Piper Solutions is currently seeking an ISSO Lead to support a contract with the Department of Energy (DOE) and the National Nuclear Security Administration (NNSA) Office of the Chief Information Officer (OCIO) based in Washington, DC. This position is a full-time onsite role. This position is critical in safeguarding mission systems and assets supporting national nuclear security, ensuring robust cybersecurity measures and procedures are maintained. As an ISSO Lead, you will play a pivotal role in Assessment & Authorization (A&A), risk management, compliance, and cybersecurity operations within a high-stakes environment protecting critical federal infrastructure.

Key Responsibilities:

• Lead Assessment and Authorization (A&A) activities, including system Authority to Operate (ATO) processes, ensuring compliance with DOE, NNSA, NIST, and federal cybersecurity requirements.
• Develop, maintain, and manage all certification and accreditation (C&A) documentation and security artifacts.
• Manage and track Plan of Action & Milestones (POA&M) activities and support remediation efforts.
• Serve as the primary liaison with customer-side C&A authorities and stakeholders to achieve compliant and successful authorization outcomes.
• Conduct risk assessments to identify system vulnerabilities, recommend mitigation strategies, and ensure system integrity.
• Oversee configuration management of security documentation and maintain accurate, up-to-date system security plans.
• Lead vulnerability assessments, security testing, and continuous monitoring efforts; provide actionable findings to the ISSM.
• Evaluate and assess the security impact of system changes and recommend appropriate mitigation strategies.
• Develop cybersecurity policies, procedures, and training materials where gaps exist; drive adoption across contractor and federal teams.
• Respond to security incidents and support investigation, reporting, and resolution activities.
• Develop and maintain incident response and disaster recovery plans; participate in tabletop and readiness exercises.
• Communicate cybersecurity posture, risks, and mitigation strategies to both technical and non-technical stakeholders effectively.
• Deliver cybersecurity awareness and role-based training to ensure compliance and secure system usage.
  
  

Requirements:

• Active Top Secret clearance or DOE Q clearance (required)
• 5 years of experience in Information System Security Officer (ISSO) or related cybersecurity role
• Strong experience with A&A processes, ATO lifecycle management, and federal compliance frameworks (NIST, FISMA)
• Demonstrated expertise in risk management, vulnerability assessments, and POA&M management
• Experience developing and maintaining security documentation and system security plans
• Proven ability to lead incident response and coordinate remediation efforts across teams
• Experience supporting DOE/NNSA environments or similar federal agencies is highly preferred
• Strong communication and stakeholder management skills
• Bachelor’s degree in Cybersecurity, Information Technology, or related field (or equivalent experience)
• Relevant certifications (e.g., Security , CISSP, CISM) preferred
  
  

Compensation to include:

• Salary Range: $160,000 – $170,000 (depending on experience)
• Full Benefits: Medical, Dental, Vision, 401K, PTO, Sick Leave if Required by Law
  
  

This job opens for applications on July 6, 2026. Applications for this job will be accepted for at least 30 days from the posting date.

Keywords: Cybersecurity, ISSO, ATO, Assessment and Authorization, Risk Management Framework, RMF, NIST, FISMA, DOE, NNSA, Compliance, POA&M, Vulnerability Management, Incident Response, Security Documentation, System Security Plans, Continuous Monitoring, Cyber Risk Assessment, Federal Security, Information Assurance, Security Operations, Policy Development, Threat Mitigation, Authorization to Operate, top secret