Information Systems Security Officer (ISSO)

Applied Research Associates (ARA), Inc.

has an immediate need for an Information Systems Security Officer (ISSO) to support the Integrated Mission Systems (IMS) Sector on-site in Raleigh, NC.

This position supports information systems operating across classified environments ranging from collateral, Secret through Top Secret/SCI, requiring a strong understanding of both enterprise RMF processes and controlled classified system operations.

The ISSO’s will support the Information System Security Manager (ISSM) in maintaining an appropriate operational security posture for multiple information systems and networks.

This role blends hands-on technical security implementation with governance, risk, and compliance (GRC) responsibilities and requires the ability to operate independently, prioritize competing requirements, and provide authoritative security guidance in classified environments.

The ISSO’s will provide mission-critical support by:


* Maintain and oversee the security posture of information systems operating in classified areas, including SCI environments, ensuring systems remain compliant throughout Authority to Operate (ATO) and Authority to Connect (ATC) lifecycles.


* Lead and execute RMF activities including security control selection, tailoring, implementation, assessment, and continuous monitoring in accordance with DoDI 8510.01, CNSSI 1253, NIST SP 800-53, and applicable overlays.


* Develop, review, and maintain security authorization documentation including System Security Plans (SSP), POA&Ms, Continuous Monitoring Plans, Risk Assessments, and IA SOPs.


* Perform and oversee vulnerability assessments using Tenable Nessus, DISA Security Technical Implementation Guide (STIGs), and SCAP Compliance Checker, ensuring findings are documented, tracked, and remediated.


* Implement, validate, and monitor secure configurations for operating systems, network devices, and applications in accordance with DISA STIGs and approved baselines.


* Conduct periodic self-inspections, audits, and system reviews to verify compliance with approved security authorization packages and applicable regulatory guidance.


* Coordinate security-relevant changes to hardware, software, and firmware with the ISSM, system owners, and AO/DAO prior to implementation.


* Support compliance with DAAPM/DAAG, NISPOM, ICDs and other applicable government regulations and customer requirements.


* Collaborate with Facility Security Officers (FSO), Program Security Officers (PSO), system owners, and engineering teams to align operational needs with security requirements.

Information Systems Security Officer (ISSO) Qualifications:


* US Citizen with an active DoD Secret clearance.


* Bachelor’s degree in Cybersecurity, Information Systems, Computer Science, or related field with 2-4 years of ISSO, Information Assurance, or other GRC related-roles, equivalent professional experience (8-10 years) will be considered for tal...