Information System Security Officer – ISSO

LMI

. Maintain System Security Plans, control implementation statements, system inventories, authorization boundaries, network and data-flow diagrams, and supporting records in eMASS or another customer-approved system .

Posted 10/26/2026full-timeRemote • United StatesMid-LevelSenior💰 $92,075 - $158,138 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in maintaining System Security Plans and preparing DoD RMF authorization packages, with a strong focus on vulnerability management and continuous monitoring. Proficient in coordinating security assessments and managing remediation actions while ensuring compliance with NIST SP 800-53 and DoD system authorization requirements.

Highest-signal resume keywords

Active Secret Security ClearanceDoD RMF Authorization PackagesEMASS or Comparable Government Authorization SystemNIST SP 800-53 Security ControlsCybersecurity Certification

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

System Security PlansVulnerability ManagementContinuous MonitoringTechnical WritingDocumentationAssessment SupportConfiguration ManagementIdentity and Access ManagementEncryptionLogging

Soft Skills

OrganizationStakeholder Coordination

Tools & Technologies

EMASSXactaDISA STIGs

Certifications & Qualifications

Cybersecurity Certification

Industry Keywords

DoD Information SystemsSecurity AssessmentsIncident ReportingRisk RecommendationsAuthorization Milestones

Tech Stack

Tools & technologies

CloudCyber Security

About the role

Key responsibilities & impact

Maintain System Security Plans, control implementation statements, system inventories, authorization boundaries, network and data-flow diagrams, and supporting records in eMASS or another customer-approved system
Support system categorization, control selection, and documentation of inherited and system-specific controls
Prepare and maintain authorization packages for initial authorization, renewal, and system changes
Coordinate evidence collection, reviews, assessment milestones, and responses to findings
Maintain POA&Ms, assign and track remediation actions, and document validation and closure evidence
Review vulnerability scans, STIG checklists, and security advisories; coordinate remediation and document unresolved risks
Execute the approved continuous monitoring plan, including control reviews, scan schedules, account reviews, audit-log reviews, configuration checks, and reporting
Evaluate proposed application, infrastructure, interface, and data-flow changes for security impacts
Work with cloud, platform, software, and cybersecurity engineers to collect technical evidence
Support security assessments, inspections, and audits by organizing evidence and tracking corrective actions
Maintain security procedures and support access-control reviews, incident reporting, contingency planning, and recovery exercises
Provide status reports on authorization milestones, monitoring results, vulnerabilities, and overdue actions; elevate risk recommendations to the ISSM and government decision-makers

Requirements

What you’ll need

Active Secret security clearance, with the ability to obtain and maintain Top Secret if required by the assignment
Minimum of five years of relevant experience as an ISSO, ISSM, cybersecurity compliance professional, or equivalent practitioner supporting DoD information systems
Hands-on experience preparing and maintaining DoD RMF authorization packages, including security control documentation, assessment support, POA&M management, and ATO sustainment
Experience using eMASS, Xacta, or a comparable government authorization system
Working knowledge of NIST SP 800-53 security controls, DISA STIGs, vulnerability management, continuous monitoring, and DoD system authorization requirements
Ability to interpret vulnerability scan results, technical configurations, system diagrams, and assessment findings
Working knowledge of operating systems, networking, identity and access management, encryption, configuration management, and logging
Current cybersecurity certification relevant to assigned duties and ability to meet applicable DoD 8140 work-role and proficiency-level qualification requirements
Strong technical writing, documentation, organization, and stakeholder coordination skills
Ability to support periodic travel and perform classified duties at approved facilities
A college degree is not required
Applicants must meet eligibility requirements for a U.S. Government security clearance; only U.S. Citizens are eligible for a security clearance