Information Systems Security Officer

Job Summary

Managing security authorization and continuous monitoring for cloud systems, the full-time remote Information Systems Security Officer will oversee DoD Impact Level 4 and 5 environments, ensuring compliance with security frameworks and maintaining authorization packages.

Key responsibilities:

• Carry out the DoD Risk Management Framework (RMF) lifecycle, including system categorization, control selection, and continuous monitoring
• Build and maintain eMASS authorization packages, ensuring all documentation reflects system design and operation
• Coordinate continuous monitoring efforts, including vulnerability reporting and compliance tracking

Required qualifications:

• 3-5 years of hands-on experience in DoD cybersecurity or RMF authorization, including direct experience as an ISSO
• Experience building and maintaining authorization packages in eMASS or a similar GRC platform
• Practical knowledge of NIST SP 800-37 and NIST SP 800-53, along with DoD security control implementation guidance
• Active Secret security clearance at minimum, with a qualifying DoD IAM Level I or IAT Level II certification
• Understanding of AWS, containers, Kubernetes, and CI/CD pipelines in relation to technical security controls