(703) Cybersecurity Information System Security Officer (ISSO)

The role

The ISSO provides leadership across the full DoD Risk Management Framework lifecycle for multiple information systems. This person will lead Assessment & Authorization, Continuous Monitoring, cybersecurity governance, and risk management activities.

What you will do

• Serve as the ISSM for multiple DoD information systems supporting OUSW(A&S) mission requirements.
• Lead all phases of the DoD Risk Management Framework (RMF).
• Develop and maintain RMF authorization packages including SSPs, Security Assessment documentation, POA&Ms, and ConMon artifacts.
• Coordinate Assessment & Authorization (A&A) activities supporting ATO, IATT, and ATO-C.
• Manage Continuous Monitoring, vulnerability management, STIG compliance, and cybersecurity reporting.
• Conduct cybersecurity risk assessments and provide recommendations for Authorizing Official risk decisions.
• Coordinate Security Control Assessments (SCAs) and validate remediation activities.
• Review system architectures, authorization boundaries, data flows, and proposed changes.
• Provide cybersecurity guidance to Government leadership, Program Managers, engineers, ISSOs, ISSEs, and system administrators.
• Prepare executive briefings, authorization recommendations, and cybersecurity status reports.

Required qualifications

• Active Top Secret Security Clearance
• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Engineering, or related field (or equivalent experience)
• Minimum 8 years supporting DoD cybersecurity programs
• Minimum 5 years supporting DoD RMF and Assessment & Authorization activities
• Experience managing multiple RMF authorization packages and briefing senior Government leadership
• Excellent analytical, written, verbal, and presentation skills
• Candidates should meet applicable DoD 8140 Cyber Workforce Qualification Program requirements

Nice to have

• SCI eligibility preferred
• Certified Information Systems Security Professional (CISSP)
• Certified Information Security Manager (CISM)
• CompTIA CASP+
• Certified Cloud Security Professional (CCSP)
• Experience with DoD Risk Management Framework (RMF) and Assessment & Authorization (A&A)
• Experience with Continuous Monitoring (ConMon) and cybersecurity governance
• Experience with System Security Plans (SSPs), Security Assessment Reports (SARs), Risk Assessment Reports (RARs), and POA&M management
• Experience with Security control implementation, validation, inheritance, and reciprocity
• Experience with Vulnerability management, STIG compliance, ACAS, and cybersecurity reporting

About the company

Arlo Solutions (Arlo) is an information technology consulting services company that specializes in delivering technology solutions. Their mission is to understand and meet the needs of both customers and consultants by delivering quality, value-added solutions.