Information Systems Security Officer – ISSO2

AT&T

. Execute consistent and compliant Risk Management Framework procedures for information system authorization, accreditation, and reaccreditation activities .

Posted 9/26/2026full-timeColumbia • Maryland • United StatesSeniorLead💰 $98,100 - $175,600 per yearWebsite

Tech Stack

Tools & technologies

TypeScript

About the role

Key responsibilities & impact

Execute consistent and compliant Risk Management Framework procedures for information system authorization, accreditation, and reaccreditation activities
Maintain asset records, System Security Plans, CONOPS, POA&Ms, and other information assurance documentation according to ODNI and DoD policies
Monitor, audit, detect, and respond to non-compliance, security gaps, and unmitigated risk across assigned systems
Assess and improve system security posture with ISSMs, mission stakeholders, technical teams, and program leadership
Evaluate security solutions for classified-information processing requirements
Propose, coordinate, implement, and enforce information systems security policies, standards, and methodologies
Provide configuration management support for security-relevant software, hardware, and firmware
Assist with day-to-day security operations, including user identification and authentication administration
Research and analyze security information, identify gaps, and recommend actions to strengthen controls and reduce risk
Support program service-level agreements and respond to after-hours requests in a 24x7 mission environment

Requirements

What you’ll need

Ten or more years of experience serving as an Information Systems Security Officer on programs and contracts of similar scope, type, and complexity
Bachelor’s degree in Computer Science or a related discipline from an accredited college or university
DoD 8570 compliance with IAM Level I is required
Required Clearance: TS/SCI with polygraph
Experience with at least one of the following areas: current security tools, hardware or software security implementation, communication protocols, or encryption techniques and tools
Strong understanding of security principles, risk management, compliance monitoring, and information systems security technologies
Experience supporting RMF activities, SSP maintenance, POA&M management, accreditation activities, and security documentation for classified systems
Strong written and verbal communication skills with the ability to coordinate effectively across security, technical, mission, and leadership stakeholders
Ability to work on-site at the customer location in Columbia, Maryland
Experience supporting federal or Department of Defense programs in a classified environment
Familiarity with ODNI and DoD security policies, authorization processes, and compliance expectations
Experience partnering with ISSMs, system administrators, engineers, and mission stakeholders to resolve security findings and improve system posture
Demonstrated ability to manage competing priorities, maintain accurate documentation, and operate with urgency in a mission-critical environment

Benefits

Comp & perks

Medical/Dental/Vision coverage
401(k) plan
Tuition reimbursement program
Paid Time Off and Holidays (at least 23 days of vacation each year and 9 company-designated holidays)
Paid Parental Leave
Paid Caregiver Leave
Additional sick leave beyond what state and local law require may be available but is unprotected
Adoption Reimbursement
Disability Benefits (short term and long term)
Life and Accidental Death Insurance
Supplemental benefit programs: critical illness/accident hospital indemnity/group legal
Employee Assistance Programs (EAP)
Extensive employee wellness programs
Employee discounts up to 50% off on eligible AT&T mobility plans and accessories, AT&T internet (and fiber where available) and AT&T wireline phone