Information Systems Security Officer (ISSO)
Huntsville, AL
Marathon TS is seeking an experienced Information Systems Security Officer (ISSO) to support our federal client. As an ISSO, you will be expected to manage and oversee the cybersecurity risk management lifecycle of mission-critical, life safety information systems across the DoD environment.
Key Responsibilities :
- Ensure that systems comply with DoD -series directives, NIST SP - controls, and other applicable federal security requirements.
- Monitor and enforce compliance with established security methodologies across all phases of system operations.
- Create and maintain comprehensive policies and procedures that detail security controls and system boundaries.
- Identify, document, and manage system vulnerabilities and mitigation strategies in POA&Ms.
- Act as a liaison between cybersecurity and technical teams to interpret and implement security controls effectively.
- Support engineering teams in ensuring that security requirements are appropriately addressed throughout the system lifecycle.
- Collaborate with Authorizing Officials (AOs), Security Control Assessors (SCAs), and other key personnel throughout the Assessment and Authorization (A&A) process.
- Participate in Security Control Assessments (SCAs), accreditation meetings, and compliance briefings.
- Prepare and submit required security documentation and artifacts for internal and external audits.
- On-call Support and Maintenance : Periodically, provide after-hours emergency support.
- Perform other tasks as directed.
Required Qualifications :
Bachelor's degree in cybersecurity, information assurance, computer science, or a related field, with – years of experience in cybersecurity, information system security, or ISSO-related roles.Security+ certification is required; advanced certifications such as CISSP, CASP+, or CISM are strongly preferred.Demonstrated experience working within the Risk Management Framework (RMF), including control implementation, assessment, and authorization processes.Proficiency with key tools and platforms, including eMASS, STIGs / STIG Viewer, ACAS (Nessus / Tenable), and vulnerability scanning / assessment tools.Hands-on experience leading or supporting NIST SP - Rev control implementation and tailoring activities to align with system requirements.Strong understanding of the Authorization to Operate (ATO) process, including the development and maintenance of Plan of Action and Milestones (POA&Ms) and other required RMF artifacts.In-depth knowledge of eMASS package creation and lifecycle management, from system inception through decommissioning, is highly desirable.The ability to obtain a Secret-level security clearance.Preferred Qualifications :
Familiarity with FedRAMP controls and cloud security frameworks (AWS, Azure, or hybrid cloud environments) is a plus.Understanding of mobile system accreditation processes, including policies and compliance requirements, is a plus.Experience working with Computer-Aided Dispatch (CAD) systems or other mission-critical operational technologies is a plus.cjjobs