The ISSO plans, implements, and maintains the Risk Management Framework for assigned systems; develops security documentation including SSPs, SARs, and POA&Ms; supports the ISSM; collaborates with system owners and security professionals; provides training and briefings; and ensures compliance with DoD and DoN cybersecurity policies.
Overview
About Falconwood, Inc: Falconwood, Inc. is a small, woman/veteran-owned business providing executive level consultants and programmatic support to Department of Defense Information Technology (IT) initiatives and programs. We provide expert consultation on a diverse range of IT subjects focusing on programmatic, acquisition strategy, implementation activities and Information Assurance policy and engineering. We support the total lifecycle of Information Technology systems and applications. We have an opening for an Information Systems Security Officer (ISSO), supporting the Navy and Marine Corps Intranet (NMCI) Program. If you want to be part of a dynamic team and provide yourself with a daily challenge, this job is for you.
ResponsibilitiesThe Information System Security Officer (ISSO) will:
- Plan, implement, and maintain all phases of the Risk Management Framework (RMF) for assigned systems
- Assist in the development and maintenance of security documentation, including System Security Plans (SSPs), Security Assessment Reports (SARs), and Plans of Action and Milestones (POA&Ms)
- Work closely with the Information System Security Manager (ISSM) in executing their duties and responsibilities
- Collaborate with system owners, stakeholders, and other security professionals
- Provide security guidance and training to system users
- Prepare and present security briefings to management
- Ensure compliance with all Department of Defense (DoD) and Department of Navy (DoN) cybersecurity policies
- Ensure relevant policy and procedural documentation is current and accessible to properly authorized individuals
- Active DoD Secret clearance required
- Minimum of 3+ years of experience as an ISSO in a DoD environment; Experience with NMCI is a plus
- Bachelor's degree in Computer Science, Cybersecurity, or a related field (relevant experience may be substituted for education).
- Preferred Certifications: DoD 8570 IAM Level I certification
- Strong understanding of the RMF and NIST 800-53 security controls
- Experience with security assessment tools and techniques
- Excellent written and verbal communication skills
- Strong analytical and problem-solving skills
- Ability to work independently and as part of a team
- No travel required
$115,000 - $130,000 (based on existing skills and experience)
Similar Jobs
Information Technology • Consulting • Defense
The ISSO manages information system security and compliance for a DoD customer. Responsibilities include maintaining RMF or DIACAP authorization packages, enforcing security policies, monitoring vulnerabilities and incidents, supporting CORA and cATO continuous monitoring, managing NIST controls and configuration changes, and reporting system security status. The role requires extensive classified-environment experience, DoD security certification, a Secret clearance, strong communication skills, and the ability to lead tasks independently.
Top Skills:
CatoCloud ComputingContinuous MonitoringCoraDevsecopsDiacapDisa AssistDod Risk Management Framework (Rmf)EmassEnterprise ItsmIavaItilNist Sp 800-53 Revision 5Vdi
Information Technology • Consulting • Defense
The ISSO leads cybersecurity compliance and RMF activities for DHS information systems, including ATOs, system security plans, POA&Ms, configuration management, risk and vulnerability assessments, continuous monitoring, incident and contingency planning, access controls, inventory management, and FISMA reporting. The role advises system owners and executives, coordinates remediation, and ensures compliance with FISMA, NIST, DHS 4300 Series, and related directives.
Top Skills:
Authority To Operate (Ato)Cloud SecurityCsamDhs 4300 SeriesEmassEncryptionFedrampFismaGrc ToolsNist Sp 800-37Nist Sp 800-53RegscaleRisk Management Framework (Rmf)
Information Technology • Legal Tech • Analytics
Leads security compliance for a FedRAMP-authorized cloud environment. Maintains the ATO, coordinates continuous monitoring, assessments, audits, penetration testing, risk reviews, POA&M remediation, security documentation, and NIST control implementation. Partners with engineering, DevOps, cloud operations, compliance, and government stakeholders to support incident response, secure system changes, cloud deployments, and audit readiness.
Top Skills:
AWSAzureCloud-Native Security ServicesEndpoint Detection And Response (Edr)FedrampFismaGCPGovernance Risk And Compliance (Grc) ToolsIdentity And Access Management (Iam)Nist 800-171Nist 800-37 Risk Management FrameworkNist Sp 800-53SIEMVulnerability ScannersZero Trust Architecture
What you need to know about the Manchester Tech Scene
Home to a £5 billion digital ecosystem, including MediaCity, which consists of major players like the BBC, ITV and Ericsson, Manchester is one of the U.K.'s top digital tech hubs, at the forefront of advancements in film, television and emerging sectors like as e-sports, while also fostering a community of professionals dedicated to pushing creative and technological boundaries.
