information systems security officer

Abacus Technology

<div>Overview:
<div>
Abacus Technology is seeking an Information Systems Security Officer (ISSO) to support security and information assurance activities for Hanscom AFB. This is a full-time position.</div>
Responsibilities:
<ul><li>Develop, implement, oversee, and maintain customer organization information assurance (IA) program that identifies IA requirements, personnel, processes, and procedures.
</li><li>Supervise the customer organization&rsquo;s IA program.
</li><li>Implement and enforce all Air Force IA policies and procedures using the guidance within this instruction and applicable specialized IA publications.
</li><li>Comply with the installation WCSO policy and direction.
</li><li>Ensure all users have the requisite security clearances, supervisory need-to-know authorization, and are aware of their IA responsibilities before being granted access to Air Force information systems according to AFSSI 8522.
</li><li>Ensure all users receive IA refresher training on an annual basis.
</li><li>Develop and maintain Certification and Accreditation (C&amp;A) documentation for organization-specific systems connected to the Hanscom Network.</li></ul>
Qualifications:
<div>
6+ years experience in cyber security for DoD programs. Bachelor&rsquo;s degree in a related field. Additional years of experience may be substituted for degree requirements. Must be Security+ CE certified. Knowledge of C&amp;A processes and the RMF. Experience with eMASS. Knowledge of CCRI or similar functions/audits. Strong knowledge of Air Force, DoD and applicable Federal Cybersecurity Directives and Instructions. Possess excellent technical writing, critical thinking/analytical, and communication skills. Knowledge and experience communicating IA concepts to technical and nontechnical personnel. Able to develop technical documents and produce system design documentation. Must have excellent customer service skills; be able project a positive image and professional manner at all times; and be able to work within the confines of a set time schedule. Must be a US citizen and hold a current Top Secret clearance with SCI access (TS/SCI).</div><div></div><div><b><i><br>
Applicants selected will be subject to a U.S. government security investigation and must meet eligibility requirements for access to classified information.</i></b></div><div></div><div><b><i><br>
EOE/M/F/Vet/Disabled</i></b></div></div>

Information Systems Security Officer (ISSO)

AMERICAN SYSTEMS

<div>Overview:
<div>
AMERICAN SYSTEMS is an employee-owned federal government contractor supporting national priority programs through our strategic solutions in the areas of Information Technology, Test &amp; Evaluation, Program Mission Support, Engineering &amp; Analysis, and Training.</div><div></div><div><br>
We are seeking an <b>Information System Security Officer (ISSO)</b> to provide technical and programmatic Information Assurance support for customers in support of network and information security systems. This role is responsible for independently executing day-to-day information assurance and cybersecurity compliance activities for assigned systems, including security documentation, vulnerability assessment support, audit readiness, and implementation of security requirements.</div><div>
The ISSO will support certification and accreditation efforts, conduct security assessments, develop required security documentation, evaluate compliance with applicable laws and regulations, and recommend improvements to strengthen the organization&rsquo;s cybersecurity posture. The ideal candidate will be a strong communicator who can effectively partner with technical and program stakeholders, facilitate discussions, and support coordination across the security lifecycle.</div><div>
.</div>
Responsibilities:
<ul><li>Supports and implements security requirements within the organization&rsquo;s business processes and system environments.</li><li>
Prepare security documentation using accepted frameworks and guidelines, including RMF, Xacta, and related accreditation processes.</li><li>
Lead and facilitate meetings, briefings, and cross-functional discussions with technical and non-technical stakeholders to communicate security status, risks, vulnerabilities, assessment results, and remediation progress, and to drive alignment and timely resolution of identified issues.</li><li>
Develop and maintain Security Test and Evaluation<b> (ST&amp;E) </b>plans, ensuring the implementation of Security Technical Implementation Guides<b> (STIGs), </b>and Plan of Action and Milestones<b> (POA&amp;Ms)</b>.</li><li>
Provide certification and accreditation support, including developing, updating and maintaining security plans <b>(SPs)</b> and contingency plans.</li><li>
Conduct complex risk assessments and vulnerability assessments and recommend mitigation strategies.</li><li>
Analyze policies, procedures, and system implementations against applicable federal laws, regulations, and security standards; identify gaps and recommend corrective actions.</li><li>
Recommend system enhancements and corrective actions to address security deficiencies.</li><li>
Oversee secure configuration practices, guides implementation and validation of security tools, reviews compliance scan results, advise stakeholders on remediation priorities, and evaluates products and administrative practices for security impact and enterprise suitability</li><li>
Conduct security program audits and develop remediation strategies to reduce identified risks.</li><li>
Perform vulnerability assessments and track remediation through resolution.</li><li>
Develop strategies to support compliance with privacy, risk management, and e-authentication requirements.</li><li>
Provide information assurance support for the development and implementation of security architectures to address new and evolving requirements.</li><li>
Evaluate, develop, and enhance security policies, requirements, and tools.</li><li>
Support computer security incident investigations and response activities.</li></ul>
Qualifications:
<ul><li>2-4 years of experience in related field.</li><li>
Secret clearance.</li><li>
Advanced cybersecurity certifications such as CISSP, CASP+, or CISM are a plus.</li><li><b>
CSWF certification</b> preferred.</li><li>
Experience supporting DoD or federal information assurance programs, including Authorization to Operate <b>(ATO)</b> package support.</li><li>
Familiarity with security scanning, compliance validation, system hardening, and audit support.</li><li>
Experience supporting incident response, vulnerability management, and continuous monitoring activities.</li></ul><div><b>
Desired Skills</b></div><ul><li>
Knowledge of risk management and security control assessment methodologies.</li><li>
Evaluate products and support various aspects of system administration from a security perspective.</li><li>
Experience with security tools, vulnerability scanning platforms, and compliance reporting.</li><li>
Understanding of security architecture principles and secure system configuration practices.</li><li>
Ability to effectively use JIRA and Confluence to document security activities, track findings and remediation actions, manage workflow, and coordinate with developers, program managers, and other stakeholders.</li><li>
Ability to manage multiple priorities and support deadlines in a regulated environment.</li><li>
Strong analytical, documentation, and problem-solving skills.</li></ul>
Pay Transparency Statement: AMERICAN SYSTEMS is committed to pay transparency for our applicants and employee-owners. The salary range for this position is USD $82,100.00/Yr. - USD $90,000/Yr. Actual compensation will be determined based on several factors permitted by law. AMERICAN SYSTEMS provides for the welfare of its employees and their dependents through a comprehensive benefits program by offering healthcare benefits, paid leave, retirement plans, insurance programs, and education and training assistance. EEO Statement: EEO Race/Sex/Disability Status/Veteran Status</div>

Information Systems Security Officer, Staff

Sacramento Superior Court

<div><div><div><h2 class="jobSectionHeader"><b>Description</b></h2></div>
<p></p><div><div>Under general direction, the Information Security Officer is responsible for the leadership, oversight, and execution of the Court&rsquo;s information security, cybersecurity, privacy, and risk management programs. The Information Security Officer establishes and enforces security governance, policies, and controls to protect the confidentiality, integrity, and availability of Court information systems and data. This position provides strategic security leadership, oversees security operations and incident response, ensures regulatory and Judicial Council of California compliance, manages security risk across enterprise and Software-as-a-Service (SaaS) environments, and advises judicial officers and executive leadership on information security matters.</div></div><p></p>
<div><h2 class="jobSectionHeader"><b>Examples of Duties</b></h2></div>
<div><p>Duties may include, but are not limited to the following:</p><ul><li>
Provides enterprise-wide leadership for cybersecurity, information security, and privacy programs.</li><li>
Develops, implements, and maintains the Court&rsquo;s information security governance framework, including policies, standards, procedures, and controls.</li><li>
Establishes and oversees security programs covering network security, application security, cloud and SaaS security, endpoint protection, identity and access management, and data protection.</li><li>
Develops and maintains the Court&rsquo;s short and long-term information security strategy and roadmap, aligned with Court objectives and enterprise architecture.</li><li>
Conducts and oversees security risk assessments, threat modeling, and vulnerability management across on-premises, cloud, and SaaS environments.</li><li>
Ensures security requirements and controls are embedded into system design, procurement, and enterprise architecture decisions.</li><li>
Develops, manages, and monitors the information security budget; oversees procurement and lifecycle management of security tools, services, and SaaS solutions.</li><li>
Conducts vendor security due diligence, including risk assessments, contract security terms, and compliance reviews; ensures third-party vendors and service providers meet Court security, privacy, and data protection requirements.</li><li>
Oversees the Court&rsquo;s security incident response program, including detection, investigation, containment, remediation, and post-incident review.</li><li>
Ensures compliance with Federal Bureau of Investigations (FBI) Criminal Justice Information Systems (CJIS) Security Policy, Internal Revenue Service (IRS) Publication 1075, Judicial Council of California policies, and applicable state and federal data protection requirements.</li><li>
Supports internal and external audits, assessments, and compliance reviews; tracks and remediates findings.</li><li>
Oversees disaster recovery, business continuity, and cyber resilience planning and testing.</li><li>
Advises judicial officers, executive leadership, and management on security posture, risks, incidents, and mitigation strategies.</li><li>
Plans, prioritizes, schedules, assigns, and evaluates work of assigned personnel; assists with interviews and selection; trains and motivates staff; monitors and evaluates staff performance.</li><li>
Coordinates with statewide judicial branch security initiatives, external agencies, and partner courts.</li><li>
Promotes a culture of security awareness, accountability, and compliance across the Court.</li></ul></div><p></p>
<div><h2 class="jobSectionHeader"><b>Minimum Qualifications</b></h2></div>
<p></p><div><div><b>Education</b>: Bachelor&rsquo;s Degree from an accredited college or university in Information Technology, Information Security, Computer Science, or a closely related field.</div><div><b>
-And-</b></div><div><b>
Experience</b>: Five (5) years full-time experience in information security, information assurance, or a closely related field, including responsibility for security governance, compliance, risk management, or security architecture.</div><div></div><div><b><br>
Substitution:</b> Additional relevant full-time information security experience may be substituted for the Bachelor&rsquo;s Degree on a year-for-year basis.</div><div></div><div><b><br>
Certification</b>: Relevant security certifications are highly desirable.</div><div></div><div><br>
Preferred certifications include: Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Certified Information Systems Auditor (CISA), Certified Chief Information Security Officer (CCISO), Certified in Risk and Information Systems Control (CRISC), International Organization for Standardization (ISO)/International Electrotechnical Commission (IEC) 27001 Lead Auditor, or Computing Technology Industry Association (CompTIA) Security+.</div><div></div><div><br>
CJIS training and cloud security certifications, including Amazon Web Security (AWS) Security, Azure Security Engineer, and Google Cloud Security, are also valued.</div><div><b><br>
Knowledge of:</b></div><div></div><div><br>
Information security governance, risk management, and compliance frameworks (National Institute of Standards and Technology (NIST) Cybersecurity Framework, NIST 800-53, ISO 27001, Center for Internet Security Critical Security Controls (CIS Controls); federal and state data security standards, particularly FBI CJIS Security Policy, IRS Publication 1075, and Judicial Council of California information security policies; security incident detection, response, and forensic processes; enterprise security architecture, including identity and access management, network security, endpoint protection, encryption, and logging/monitoring; cloud and SaaS security models, shared responsibility frameworks, and third-party risk management; vulnerability management, threat modeling, and risk assessment methodologies; security budget development, procurement processes, and vendor risk management in public sector environment; principles and practices of supervision, training, staff development and performance management; principles and practices of effective team building, team leadership and conflict resolution; design, installation and maintenance of enterprise, distributed systems to courts, state agencies or other hosted court community; networking functions from network hardware and software vendors and products, network security policies, techniques and procedures, network documentation, configuration, maintenance and diagnostic procedures and techniques; internet and intranet architecture; development of long and short-term strategic initiatives for the enterprise organization; principles and practices of technical problem solving; principles, processes and techniques of project management and related software; designing disaster recovery solutions, including planning, implementation and testing; principles, practices and techniques of providing customer service; change management principles and practices.</div><div></div><div><b><br>
Ability to:</b></div><div></div><div><br>
Plan, organize and supervise the work of information security and information technology staff; provide leadership and direction to a professional and technical group of staff; motivate, train, coach, evaluate and discipline staff; establish, monitor and control projects and schedules to meet goals and objectives; translate complex security risks into business impact for judicial officers, executive leadership and non-technical stakeholders; understand highly complex information technology systems and issues; identify and articulate security problems and recommend documented solutions; establish and maintain effective and cooperative working relationships with judicial officers, executive leadership, court staff, vendors, and external agencies; communicate effectively both orally and in writing; promote and maintain a team environment; understand the Court&rsquo;s strategic business objectives as they relate to information security.</div></div><br>
<p></p>
<div><h2 class="jobSectionHeader"><b>Other Information</b></h2></div>
<div><p>Must be able to pass a criminal history background check.<br>
<br>
Possession of a valid California driver&rsquo;s license or the ability to utilize an alternative method of transportation when needed to carry out job-related essential functions.</p></div></div></div>

Information Security Officer - IT Division

Information Technology Strategies

<div><p>Information Technology Strategies, Inc. is a government IT solutions provider servicing commercial and government initiative in various parts of the United States. We are currently seeking a Lead Information System Security Officer to work for our company.</p><p><b>
Summary:</b></p><div><ul><li>
Client Agency is the Defense Intelligence Agency.</li><li>
Serves as the primary ISSO responsible for Risk Management Framework (RMF) implementation and system accreditation activities.</li><li>
Develops and maintains Authority to Operate (ATO) packages, security control assessments, and continuous monitoring programs.</li><li>
Coordinates with Authorizing Officials, security teams, and auditors.</li><li>
Manages Plans of Action and Milestones (POA&amp;Ms) and ensures timely remediation of security findings. Implements security controls and ensures compliance with all applicable security requirements. Provides ISSO support for multiple systems and mentors junior ISSO staff.</li></ul></div><p></p><p><b><br>
Requirements:</b></p><div><ul><li><b>
Active TS/SCI clearance.</b></li><li><b>
A DoD 8570/8140 IAM Level II or III certification (e.g., CISSP, CISM).</b></li><li>
Demonstrated senior-level experience (minimum 8 years) as an ISSO for DoD/IC Systems.</li></ul></div><p></p><p><b><br>
Work With Us</b></p><p>
IT-Strat is a technology consulting company that holds various contract vehicles including best in class vehicles. IT-Strat has supported multiple clients including the Department of Homeland Security (DHS), Customs and Border Protection (CBP) and Immigration and Customs Enforcement (ICE via both prime and meaningful subcontracts). Additionally, IT-Strat has prime contracts with Defense Information Systems Agency (DISA), Defense Logistics Agency (DLA) and many others. We maintain relationships with multiple large businesses.</p><p>
IT-Strat was established in 2002. We are a certified Woman Owned Small Business. IT-Strat also successfully graduated as an SBA 8(A) company. It was an 8(a) company from 2008 through 2017 and currently still has 8(a) contract vehicles.</p><p>
Benefits We Offer:</p><div><ul><li>
Four Medical/Vision options including an HSA plan</li><li>
Dental and Orthodontia plan</li><li>
Vision Materials plan</li><li>
Paid Life, Short-Term Disability, and Long-Term Disability</li><li>
401K Retirement Program with company contribution</li><li>
Paid Vacation, Holidays, Sick Leave, Floating Holidays, Bereavement Leave</li><li>
Semi-monthly pay cycle</li></ul></div><p>
Information Technology Strategies (&ldquo;IT-Strat&rdquo;) is an Equal Employment Opportunity employer, and it is our policy to consider applicants for employment without regard to sex, race, color, creed, religion, national origin, sexual orientation, marital status, age, disability, veteran status, alienage, ancestry, and any other factors prohibited by law. Employment selections are based on company and client requirements and the qualifications and skills of the candidate. IT-Strat is committed to actively capitalizing on the diversity of skills, talents, and perspectives of our employees.</p></div><p></p>

Lead Information System Security Officer

Jabil

<div>At Jabil (NYSE: JBL), we are proud to be a trusted partner for the world's top brands, offering comprehensive engineering, supply chain, and manufacturing solutions. With 60 years of experience across industries and a vast network of over 100 sites worldwide, Jabil combines global reach with local expertise to deliver both scalable and customized solutions. Our commitment extends beyond business success as we strive to build sustainable processes that minimize environmental impact and foster vibrant and diverse communities around the globe.<br>
<p></p><h1 class="jobSectionHeader"><b>BISO - Job Summary
</b></h1><p>The Business Information Security Officer (BISO) is the information security program owner for their assigned business segment. The BISO is an expert at The Company&rsquo;s information security program capabilities such as security policies and technical security solutions. The BISO advises business stakeholders on the company&rsquo;s security protections, customer security requirements, and regulatory security controls with the objective of minimizing the businesses&rsquo; information risk exposure and achieving secure business enablement.
</p><h1 class="jobSectionHeader"><b>BISO Duties and Responsibilities
</b></h1><ul><li>Engages assigned business as the <b>central point of contact for information security and advocates security control </b>needs of assigned business while also advocating for the company&rsquo;s security initiatives and controls deployment. Stays knowledgeable about the company&rsquo;s technical controls and advocates for the technical security control needed by assigned business and applies knowledge of company&rsquo;s technical control capabilities.
</li><li>Promotes corporate security awareness activities and implements security awareness concepts locally for assigned business and customizes communications to be suitable for local language and culture.
</li><li><b>Promotes and evangelizes the company&rsquo;s IT Security Policies and Standards </b>. Advises stakeholders on security deviation control alternatives, such as compensating controls, and supports stakeholders through the policy deviation process.
</li><li>Provides security consulting and advice for Mergers &amp; Acquisitions by performing on-site or remote security risk assessments and writing report of findings and recommendations in terms suitable for the business to make informed data and computer security risk decisions.
</li><li>Presents monthly security status report for assigned business to stakeholders such as the CISO, CIO(s), CTOs, and IT Managers. Presents executive-level communications regarding the state of security for assigned business.
</li><li><b>Provides security consulting and advice for customer audits, regulatory audit, technical vulnerability assessments </b>(TVAs) and other security-related audits. Reviews and analyzes security components of audit plans and applies knowledge and expertise of IT Security policies and locally deployed security processes and procedures to ensure a successful audit outcome. Provides leadership for remediation activities and assembles necessary resources to ensure successful remediation results.
</li><li>Advises stakeholders on incident investigations and champions stakeholders through the security incident process.
</li></ul><p>BISO Skills - Security Specific and People Skills:
</p><ul><li>Experience implementing or managing ISO 21434 certification and/or UN R155/156 compliance.
</li><li>Expert in U.S. and international security and privacy regulations such as CMMC, DFARS, HIPAA, CCPA, GDPR, EAR, etc.)
</li><li>Expert in security industry standards (SIS) and able to apply SIS to unique business and information technology situations. (i.e. ISO-27001, NIST, ITIL Security Management, PCI-DSS, NIS2, TISAX)
</li><li>Expert knowledge of customer security requirements and company&rsquo;s obligation for protecting customer information assets in company&rsquo;s care.
</li><li>Able to create and implement methodologies to support BISO security consulting and advisory services.
</li><li>Able to build positive relationships and rapport with customers and Jabil teams (i.e. Business stakeholders, IT
</li><li>Develop and manage oversight of IT Expansions and Divestitures
</li></ul><p>Security Teams, IT Managers/Directors, IT Network Team, Legal Team, etc)
</p><p>Education &amp; Experience Requirements
</p><ul><li>Required: Bachelor's Degree. Prefer a degree in a technical field such as Information Security, Management Information Systems, Computer Science, or Engineering.
</li><li>5+ years of Information security practice
</li><li>Preferred: Security Certification: CISM, CISSP, CISA.
</li><li>Preferred: 3 plus years successful work experience as a BISO
</li>Preferred: Experience in the Automotive and/or Healthcare cybersecurity space<br>
<li>
</li></ul><p></p>BE AWARE OF FRAUD: When applying for a job at Jabil you will be contacted via correspondence through our official job portal with a jabil.com e-mail address; direct phone call from a member of the Jabil team; or direct e-mail with a jabil.com e-mail address. Jabil does not request payments for interviews or at any other point during the hiring process. Jabil will not ask for your personal identifying information such as a social security number, birth certificate, financial institution, driver&rsquo;s license number or passport information over the phone or via e-mail. If you believe you are a victim of identity theft, contact the Federal Bureau of Investigations internet crime hotline (www.ic3.gov), the Federal Trade Commission identity theft hotline (www.identitytheft.gov) and/or your local police department. Any scam job listings should be reported to whatever website it was posted in.
<p></p><p><b>Jabil, including its subsidiaries, is an equal opportunity employer and considers qualified applicants for employment without regard to race, color, religion, national origin, sex, sexual orientation, gender identity, age, disability, genetic information, veteran status, or any other characteristic protected by law.<br>
</b></p><p></p><h1 class="jobSectionHeader"><b>Accessibility Accommodation
</b></h1><p></p>If you are a qualified individual with a disability, you have the right to request a reasonable accommodation if you are unable or limited in your ability to use or access Jabil.com/Careers site as a result of your disability. You can request a reasonable accommodation by sending an e-mail to Always_Accessible@Jabil.com or calling 727-803-7988 with the nature of your request and contact information. Please do not direct any other general employment related questions to this e-mail or phone number. Please note that only those inquiries concerning a request for reasonable accommodation will be responded to.<br>
<p></p>#whereyoubelong<br>
<p></p>#AWorldofPossibilities</div><p></p>

Enterprise Business Information Security Officer

Corps Solutions

<div><div><div><b>Information System Security </b><b>Offic</b><b>er</b><b> (ISS</b><b>O</b><b>)</b><b> / Communications and Information Systems (CIS) Deputy Lead</b></div>
Quantico, VA</div>
<div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><p>The ISSO/CIS Deputy Lead reports to the MSTP Project Manager and receives work direction derivatives from the Communications and Information Systems Lead.</p>
</div>
<div><p><b>ESSENTIAL DUTIES AND RESPONSIBILITIES</b></p>
</div>
<div><ul><li><p>Provide Cyber Security technical and management support to MSTP, ensuring compliance with the RMF, NIST, DoD and Marine Corps standards to establish or sustain ATOs.</p>
</li></ul></div><div><ul><li><p>Deliver cybersecurity and IA training, guidance, and reporting for MSTP personnel; monitor and report compliance with MCCOG/MCEN Operational Directives (OPDRs).</p>
</li></ul></div><div><ul><li><p>Maintain POA&amp;Ms, ensuring timely remediation of client, server, and network vulnerabilities through automated scanning tools and manual compliance checks.</p>
</li></ul></div><div><ul><li><p>Implement IAVAs, OPDIRs, DISA STIGs, patches, and industry best practices to maintain cybersecurity compliance across BSC/CAST information, C2, and simulation systems.</p>
</li></ul></div><div><ul><li><p>Configure, operate, and troubleshoot HBSS client/server policies for compliance and support SIEM deployment for monitoring and reporting.</p>
</li></ul></div><div><ul><li><p>Draft and submit cybersecurity incident/violation reports and verify personnel certification compliance (DoD 8570/8140, SECNAV M5239.2, ECSM 024).</p>
</li></ul></div><div><ul><li><p>Maintain DIACAP/RMF A&amp;A documentation, ensure accurate MCCAST submissions, and preserve historical security records.</p>
</li></ul></div><div><ul><li><p>Support CIS Lead with daily operations, IT services for MAGTF exercises, and the development/maintenance of security, governance, and system documentation.</p>
</li></ul></div><div><ul><li><p>Assist in producing briefs, reports, AARs, and configuration management materials, and contribute to IT/C2 policies, SOPs, and TTPs.</p>
</li></ul></div><div><ul><li><p>Oversee equipment issue/recovery, inventory accuracy, purchasing documentation, ticket management, and budget tracking.</p>
</li></ul></div><div><ul><li><p>Monitor MCEN reporting requirements, compile data, and draft responses to HQMC C4 data calls (OpDirs, CTOs, ETSM2).</p>
</li></ul></div><div><ul><li><p>Represent MSTP CIS in meetings and working groups, support event reviews and walkthroughs, and serve as acting CIS Lead when required.</p>
</li></ul></div><div><p><b>EDUCATION</b></p>
</div>
<div><ul><li><p>IAT Level II: Baseline Certification ‐ IAW DoD 8140.01 or higher required &ndash; Current DoD approved IA baseline certification (CCNA Security, CySA+, GICSP, GSEC, Security+ CE, SSCP).</p>
</li></ul></div></div><div><div><ul><li><p>Must possess and maintain training and certifications sufficient to be granted privileged access to Marine Corps information technology (IT) and information systems (IS) and be able to obtain a Marine Corps Compliance and Authorization Support Tool (MCCAST).</p>
</li></ul></div><div><p><b>EXPERIENCE</b></p>
</div>
<div><ul><li><p>At least three years of experience in IT, which should include successful experience as an enterprise team member or lead.</p>
</li></ul></div><div><ul><li><p>Recent hands-on experience within Marine Corps or DoD agencies in CIS engineering, architecture design, implementation, and maintenance of enterprise datacenters, systems, sites and services, and infrastructure projects.</p>
</li></ul></div><div><ul><li><p>Well-versed in USMC eMASS and DoD cyber security compliancy, instructions, policies and regulations.</p>
</li></ul></div><div><ul><li><p>MEF level operational military experience in communications with prior experience as senior 0679, 0699 or equivalent.</p>
</li></ul></div><div><p><b>CORE SKILLS/COMPETENCIES
</b></p></div><div><p><i>Required Knowledge, Skills and Abilities</i></p>
</div>
<div><ul><li><p>Proficient in MS Word, Outlook, Excel, PowerPoint, Visio, Project, and SharePoint.</p>
</li></ul></div><div><ul><li><p>Strong communication and presentation skills. Able to read, write, and communicate effectively in English. Able to design and write clear communications and present training programs.</p>
</li></ul></div><div><ul><li><p>Excellent organizational, planning, problem-solving, prioritization, interpersonal skills, and able to instinctively adapt, plan, inform and influence.</p>
</li></ul></div><div><p><b>WORKING CONDITIONS</b></p>
</div>
<div><ul><li><p>Required to sit for extended periods of time and maintain focus</p>
</li></ul></div><div><ul><li><p>Daily travel in local area during work day (including use of personal vehicle)</p>
</li></ul></div><div><ul><li><p>Be able to work an unstable schedule, to include holidays and weekends.</p>
</li></ul></div><div><p><b>SPECIAL POSITION NOTATIONS</b></p>
</div>
<div><ul><li><p>CONUS and OCONUS travel may be required for up to three weeks at a time (or longer).</p>
</li></ul></div><div><ul><li><p>Qualification as an authorized company driver is required. All authorized company drivers must have a valid driver&rsquo;s license, current automobile insurance, and a driving record that is acceptable to the company&rsquo;s auto insurance provider.</p>
</li></ul></div><div><p><b>SECURITY CLEARANCE</b></p>
</div>
<div><ul><li><p>A Top Secret/Sensitive Compartmented Information (TS/SCI) clearance is required.</p>
</li></ul></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div><div>This position description outlines the general responsibilities and requirements for the stated position and in no way is an exhaustive list. The company maintains the right to assign or reassign responsibilities to this position at any time.</div></div></div>

Information System Security Officer (ISSO) / Communications and Information Systems (CIS) Deputy Lead

Arc Aspicio

<div><p>Interested in working in an innovative, collaborative environment with motivated, social people? At Arc Aspicio, you can join a leading consulting firm that specializes in human capital, data analytics, management, and strategy professional services to deliver compelling solutions. Consultants join our practice focused on mission-critical projects and quickly learn to contribute to and grow our company across multiple projects. We invest in hiring, mentoring, and training smart, diverse, and self-driven professionals interested in all aspects of the company and our homeland security and Government clients. We are looking for people who are willing to share ideas and work as part of a collaborative, innovative team.</p><div>
The <b>Information System Security Officer (ISSO) </b>supports complex Federal technology programs and oversees, manages, tracks, and reports on Government program-level information security to protect systems, facilities, and infrastructure. They have <b>at least 5 years of ISSO experience on complex mission-critical programs</b> and the ability to closely collaborate with Government leaders, facility managers, software development teams, and Government security offices.</div><p>
Arc Aspicio is currently working in a hybrid work environment where work will be performed at client sites, the Arc Aspicio DC office, and remotely. All candidates must live in the Washington, DC area at the time of employment.</p><p><b>
Responsibilities</b></p><ul><li>
Serve as the primary security point of contact for assigned federal information systems</li><li>
Develop, implement, and maintain <b>System Security Plans (SSPs)</b> in accordance with <b>NIST SP 800‑53, RMF,</b> and agency‑specific requirements</li><li>
Ensure continuous compliance with<b> FISMA, FedRAMP, </b>and organizational security policies</li><li>
Support system <b>Authorization to Operate (ATO)</b> activities, including initial authorizations, renewals, and continuous monitoring</li><li>
Conduct security control assessments and analyze system risks to confidentiality, integrity, and availability</li><li>
Identify security vulnerabilities and manage remediation efforts through<b> Plans of Action and Milestones (POA&amp;Ms)</b></li><li>
Collaborate with system owners and engineers to implement risk‑based security controls</li><li>
Provide security guidance during system development, modernization, and operational phases</li><li>
Execute and maintain continuous monitoring programs, including vulnerability scanning, log review, and control validation</li><li>
Review and analyze scan results (e.g., Nessus, Tenable) and track remediation progress</li><li>
Monitor compliance artifacts and evidence to support audits, inspections, and assessments</li><li>
Support cybersecurity incident response activities, including investigation, documentation, and reporting</li><li>
Ensure timely reporting of incidents in accordance with Federal and agency procedures</li><li>
Work with ISSMs, program managers, and Federal customers</li><li>
Collaborate with our clients to solve tough problems, delivering outstanding client service, and achieving mission results</li><li>
Apply excellent consulting, business analysis, and communications skills to quickly identify problems, analyze challenges, and recommend solutions to our team and our clients</li></ul><p><b>
Required Qualifications</b></p><ul><li><b>
At least 5 years of direct ISSO experience</b> in overseeing and interacting within a portfolio of security assets and systems at a Government-program level that involves multiple systems and facilities</li><li>
Direct experience with senior clients and stakeholder engagement and delivering work products for clients in a complex environment</li><li>
Proven to be flexible and thrive in a dynamic, ambiguous, and complex work environment and manage multiple tasks and projects simultaneously</li><li>
Outstanding written and oral communication and collaboration skills and strong leadership potential</li><li>
Ability to collaborate and work effectively remotely and in-person</li><li>
Technologically savvy, especially with Microsoft products and use of collaboration tools like SharePoint</li><li>
Desire to join a consulting firm and learn business concepts; loves to collaborate and reach out to get involved in company events, offerings, and special projects</li><li>
Ability to work in the Washington, DC metro area and travel to different locations</li><li><b>
Clearance:</b><b> </b>Due to Federal contract and/or regulatory requirements, this position is limited to U.S. citizens only. This position does not offer employer sponsorship</li><li>
Currently holds or has the ability to obtain and maintain security clearance</li><li><b>
Education:</b> Bachelor&rsquo;s degree</li><li><b>
Critical Skills:</b> Executive presence, entrepreneurial spirit, strong work ethic, collaborative mind-set, excellent problem-solving skills, and interest in working in a consulting firm. Interest in working on assignments outside of one project is strongly desired</li></ul><div><b>
Preferred Qualifications:</b></div><div><ul><li><b>
Certifications:</b> CISSP</li><li>
Experience working with CISA, CISOs, ISSMs, and senior leadership</li></ul></div><div><b>
Applying to Arc Aspicio:</b><b> </b>Our recruiting process is very competitive. Therefore, we ask that you submit a brief, tailored cover letter to tell us what you are looking for in a company and why you would be a great fit for a consulting firm in this role. Cover letters are essential so we can understand your interest and experience relevant to consulting. <b>The use of AI tools or AI-generated content is strictly prohibited throughout the application process.</b> Applicants are expected to rely solely on their own knowledge, experience, judgment, and work when completing application materials and participating in any stage of the hiring process. Any applicant found to have used AI assistance will be removed from consideration for the position.</div><div></div><div><b>
Total Rewards: </b>Salary is just one element of our Total Rewards which includes compensation, benefits, bonuses, professional development, and other career opportunities. The projected salary range for this position is <b>$115,000 - $135,000</b>. This range takes into account the wide variety of factors that are considered in making compensation decisions, including but not limited to: skill sets and expertise, experience, education, training, certifications, contract and client requirements (if applicable), and other business and organizational needs. At Arc Aspicio, it is not typical for an individual to be hired at or near the top of the range for their role, and compensation decisions are dependent on the facts and circumstances of each case.</div><div>
</div><div><b>
About Arc Aspicio: </b>Arc Aspicio enhances the future of our nation by creating bold ideas and bringing them to life. A consulting and solutions company, Arc Aspicio solves problems by applying our integrated capabilities in strategy, design, data, human capital, behavioral science, and technology. The company passionately pursues our vision to be the hub of creativity where people take action to change the world. Employees collaborate with clients and partners to create solutions using a human-centered approach.</div><div>
</div><div>
Our goal is to attract people who love to collaborate and work in a team-oriented environment. Our culture empowers our employees to learn, share knowledge, be leaders in everything they do, and develop strong relationships with their clients and colleagues.</div><div>
</div><div>
Our positions are based in the DC metro area and require employees to live in DC, VA, and MD within commuting distance of our client sites and DC office.</div><div>
</div><div><b>
Commitment to Respect, Collaboration, and Innovation:</b> Arc Aspicio is dedicated to fostering a workplace where individuals from all backgrounds can contribute to the company and serve our clients. As a growing professional services solutions firm focused on solving large, complex problems, we welcome applications from candidates with a variety of experience, skills, and knowledge. All employment is decided on the basis of qualifications, merit, and business need. <b>Equal Opportunity Employer/M/F/D/V</b></div></div>

Information System Security Officer (ISSO)

Search 10000+ Information systems security officer jobs near you this June. New roles added regularly across leading industries. Apply today.