Information System Security Officer (ISSO)
LMI Consulting · Remote, UNAVAILABLE, US
About this role
## Information System Security Officer (ISSO) ### Overview LMI is seeking an **Information System Security Officer (ISSO)** to support the **Robotics and Autonomous Systems (RAS)** business unit and Department of War mission partners. The ISSO will maintain system security documentation, coordinate **RMF** activities, support **ATO** packages, and track security controls, vulnerabilities, and remediation actions throughout the system lifecycle. This is a **remote** position requiring an **active Secret clearance** and the ability to obtain/maintain **Top Secret** if required. **Periodic travel** may be required for assessments, customer meetings, and access to approved facilities. All classified work must be performed in approved facilities. --- ### Responsibilities - Maintain **System Security Plans**, control implementation statements, system inventories, authorization boundaries, network/data-flow diagrams, and supporting records in **eMASS** (or another customer-approved system) - Support system categorization, control selection, and documentation of inherited and system-specific controls (including shared responsibilities across cloud providers, platform teams, and application owners) - Prepare and maintain **authorization packages** for initial authorization, renewal, and system changes; coordinate evidence collection, reviews, assessment milestones, and responses to findings - Maintain **Plans of Action and Milestones (POA&Ms)**; assign and track remediation actions and document validation/closure evidence - Review vulnerability scans, **STIG** checklists, and security advisories; coordinate remediation and document unresolved risks for review - Execute the approved **continuous monitoring** plan (control reviews, scan schedules, account reviews, audit-log reviews, configuration checks, and required reporting) - Evaluate proposed changes to applications, infrastructure, interfaces, and data flows for security impacts; update documentation and coordinate additional assessment/authorization needs - Work with cloud/platform/software/cybersecurity engineers to collect technical evidence from deployed systems and software delivery pipelines - Support security assessments, inspections, and audits by organizing evidence, responding to assessor questions, and tracking corrective actions - Maintain security procedures and support access-control reviews, incident reporting, contingency planning, and recovery exercises - Provide status reports on authorization milestones, monitoring results, vulnerabilities, and overdue actions; elevate risk recommendations to the **ISSM** and authorized government decision-makers --- ### Qualifications **Required Qualifications** - **Active Secret clearance**; ability to obtain/maintain **Top Secret** if required - **Minimum 5 years** relevant experience as an **ISSO/ISSM**, cybersecurity compliance professional, or equivalent supporting DoD information systems - Hands-on experience preparing/maintaining **DoD RMF authorization packages**, including security control documentation, **POA&M** management, and **ATO sustainment** - Experience using **eMASS**, **Xacta**, or comparable government authorization systems - Working knowledge of **NIST SP 800-53**, **DISA STIGs**, vulnerability management, continuous monitoring, and DoD authorization requirements - Ability to interpret vulnerability scan results, technical configurations, system diagrams, and assessment findings; coordinate evidence-based remed
Listing freshness
CronJobs last confirmed this listing 2h ago. If its source stops confirming the opening for seven days, this page is removed from active inventory.