Principal Information System Security Officer
Clarityinnovates · Columbia, MD
About this role
**Clarity Innovations — Principal Information System Security Officer (ISSO)** ## Position Overview The ISSO supports the ISSM and owns the authorization documentation for a single platform at the **unclassified (CUI)** classification level. This is the single ISSO seat for that platform/classification combination (other environments are covered by separate ISSOs). The ISSO is **not embedded with one team**—instead, they work across all development teams to consolidate requirements into a single authorization package. The role focuses on establishing and maintaining **ATO packages** and associated artifacts, maintaining **interconnection agreements (ISAs and related)**, and transitioning the package from **NIST SP 800-53 Rev 4 to Rev 5**. Initial scope is limited to the unclassified (CUI) system; as clearance/access are completed, the ISSO may provide **surge support and backfill** for other environments (including leave coverage). ## Key Responsibilities - Own and maintain the authorization package and **body of evidence (BoE)**, including the **SSP**, control statement responses, and supporting artifacts (using **eMASS** as the system of record). - Execute the transition from **NIST SP 800-53 Rev 4 to Rev 5** in coordination with the ISSM. - Develop and maintain **interconnection and boundary documentation**, including **ISAs** and related agreements. - Own **POA&M** entries and milestone tracking; coordinate remediation artifacts and status with security engineers and development teams. - Prepare **ConMon** documentation and reporting on schedule; ensure findings are accurately captured in the package. - Maintain the **SBOM** and component version representation; validate components against **CVE data** and mitigation guidance. - Identify required remediation (e.g., upgrade to fixed versions). - If compensating controls are proposed, participate in the architectural plan and help obtain **AO** and government customer buy-in. - Participate in the **CCB** by documenting authorization impact of proposed changes and keeping the package aligned with approved changes. - Contractor ISSOs/ISSMs do not accept new risk; they determine alignment with current risk posture and route out-of-scope items to the appropriate government authority. - Coordinate with security engineers for technical evidence and with development teams for artifacts; coordinate with **SCAs, AO staff, and government counterparts** on documentation requests and findings. - Draft risk acceptance and deviation documentation when assigned by the ISSM (for ISSM review before submission). - Identify project-specific security training and awareness gaps not covered by customer/company guidance (with the ISSM). - Support security authorization activities in compliance with **RMF**, **DoDI 8510.01**, and related DoD processes. - Provide surge support/backfill for ISSOs in other environments as clearance/access allow (longer-term expectation). ## Qualifications - **U.S. citizen** able to obtain and maintain **TS/SCI clearance with CI polygraph**. - Current **DoD 8570.01-M IAM Level II or III** certification (transitioning to **DoD 8140** qualification once the applicable list is approved). - **5+ years** relevant experience developing and maintaining RMF authorization packages (**7+ preferred**). - Working knowledge of: - **RMF** - **NIST SP 800-37** - **NIST SP 800-53 (Rev 4 & Rev 5)** - **NIST SP 800-53B** - **NIST SP 800-60** - **DoDI 8510.01** - Experience
Listing freshness
CronJobs last confirmed this listing 1h ago. If its source stops confirming the opening for seven days, this page is removed from active inventory.