Information Systems Security Officer

Job Summary

To manage security authorization and continuous monitoring for cloud systems supporting federal defense missions, the full-time Information Systems Security Officer will oversee DoD Risk Management Framework processes, maintain eMASS authorization packages, and collaborate with engineering teams, all in a remote capacity for candidates residing in approved hiring hubs.

Key responsibilities:

• Carry out the DoD Risk Management Framework lifecycle, including system categorization, control selection, implementation, assessment, authorization, and continuous monitoring
• Build and maintain eMASS authorization packages and ensure documentation reflects system design and operation
• Coordinate continuous monitoring activities, including vulnerability reporting and compliance tracking

Required qualifications:

• 3-5 years of hands-on experience in DoD cybersecurity or RMF authorization, including direct experience as an ISSO
• Experience building and maintaining authorization packages in eMASS or a comparable GRC platform
• Practical knowledge of NIST SP 800-37, NIST SP 800-53, and DoD security control guidance
• Strong technical writing skills and experience with documentation such as SSPs and POA&Ms
• Active Secret security clearance and a qualifying DoD IAM Level I or IAT Level II certification, or the ability to obtain one within 90 days