Information Systems Security Officer
Core
Manage security and compliance activities for cloud-native products and customer environments, applying the Risk Management Framework and NIST guidance to support IATT and ATO efforts.
Role type
Senior IC Information Systems Security Officer (ISSO) and Manager
Builds
Cloud-native products and secure customer environments
Domain
Defense technology, AI/ML, cloud-native security
Deliverable
production ML models
Required skills
Risk Management Framework (RMF), NIST SP 800-37/53/60, Kubernetes security, containerized workloads, System Security Plans (SSP), control implementation statements, POA&Ms, continuous monitoring, vulnerability management, DISA STIG compliance, security risk assessment
Preferred skills
CISSP, CISM, CISA, CGRC, eMASS, IATT/ATO process support, Kubernetes DevSecOps, FIPS requirements, security policy writing
Technologies
Kubernetes, cloud-native environments, DISA STIG tools, eMASS
Responsibilities
Provide ISSO oversight across product contracts and customer environments; Develop and maintain RMF authorization packages including SSPs and traceability matrices; Coordinate control owners and stakeholders for evidence collection and assessment readiness; Conduct ongoing security risk assessments using vulnerability scans and posture reviews; Manage POA&Ms from identification to validated closure; Evaluate architecture changes for security impact; Conduct continuous monitoring and control assessments.
Seniority
Senior, hands-on IC with management responsibilities