Lead Senior Information Systems Security Officer (ISSO)

Dynamic Solutions Technology, LLC, a premier strategic services firm that meets IT and Service needs for commercial and government clients, is seeking a full-time Lead Senior Information Systems Security Officer (ISSO) to support the government customer located in Washington, DC. This is an exempt hybrid remote position. (A minimum of TWO days per week reporting to site; additional support as needed on a case-by-case basis)

MUST BE A U.S. CITIZEN

Responsibilities:

• Serve as the Contractor's senior ISSO and primary point of accountability for the technical execution, coordination, and oversight of information system security activities supporting assigned Federal systems.


• Act as the primary technical interface between the Contractor and Government stakeholders, including the Information System Security Manager (ISSM), Chief Information Security Officer (CISO), Authorizing Official/Authorizing Official Designated Representative (AO/AODR), and System Owners.


• Lead, coordinate, and oversee all Contractor ISSO activities to ensure consistent, compliant, and effective cybersecurity execution across supported information systems.


• Direct the development, review, maintenance, and submission of Risk Management Framework (RMF) and authorization-package artifacts, ensuring documentation is accurate, complete, current, and compliant with applicable Federal cybersecurity requirements.


• Lead cybersecurity authorization activities, including system categorization, security control implementation, assessment support, Plan of Action and Milestones (POA&M) management, security documentation, and authorization activities.


• Conduct internal quality assurance reviews of ISSO deliverables and authorization artifacts prior to Government submission to ensure technical accuracy, completeness, and compliance with contract and Government requirements.


• Manage cybersecurity risk and issue registers; identify, assess, document, track, and escalate security risks, vulnerabilities, deficiencies, and compliance issues to appropriate Contractor and Government leadership.


• Lead and support Continuous Monitoring (ConMon), vulnerability management, security control assessment, audit support, cybersecurity inspections, and other RMF-related workstreams as assigned.


• Participate in Government governance forums, technical reviews, cybersecurity working groups, and program meetings while representing the Contractor's technical interests and providing expert cybersecurity guidance.


• Maintain hands-on technical cybersecurity expertise and actively perform senior ISSO functions; provide technical leadership rather than functioning solely in an administrative or managerial capacity.


• Monitor system security posture and coordinate with system owners, cybersecurity personnel, system administrators, and technical teams to identify and resolve security deficiencies and maintain operational compliance.


• Utilize and maintain proficiency with cybersecurity and information technology platforms, including CSAM, ServiceNow, Splunk, Tenable/Nessus, Qualys, Microsoft Defender, Microsoft Intune, BigFix, Microsoft Azure, Microsoft 365, Microsoft Entra ID, Okta, Palo Alto Panorama, and Zscaler.


• Analyze security monitoring, vulnerability, configuration, and compliance data to support risk-based decision-making, incident response coordination, continuous monitoring, and overall system security posture management.


• Coordinate with the Contractor's Program Manager on contract-level requirements, including staffing, reporting, deliverable status, invoicing support, workload planning, and resolution of programmatic issues affecting cybersecurity execution.


• Provide technical leadership, mentoring, and knowledge transfer to ISSO and cybersecurity personnel while maintaining required qualifications, certifications, and technical proficiency throughout the period of performance.

• Bachelor's degree from an accredited institution in Cybersecurity, Information Assurance, Information Technology, Computer Science, Information Systems, or a related technical discipline. A Master's degree in a related field is preferred.


• CISSP or another cybersecurity certification meeting the applicable DoD 8140/8570 IAT III/IAM III requirements is required.


• Preferred certifications include CISM, CASP+, CCSP, CAP, or GIAC security certifications.


• Personnel shall maintain all required certifications and professional qualifications throughout the period of performance.


• Minimum of 8 years of progressively responsible experience in information systems security, cybersecurity, information assurance, or a related discipline, including at least 5 years supporting Federal Government or Department of Defense information systems.


• Minimum of 5 years of hands-on experience supporting the Risk Management Framework (RMF), including security control implementation, assessment, authorization, continuous monitoring, POA&M management, and security documentation.


• Demonstrated experience developing, reviewing, maintaining, and submitting System Security Plans (SSPs), Security Assessment Reports (SARs), Plans of Action and Milestones (POA&Ms), risk assessments, security control documentation, and other authorization-package artifacts.


• Demonstrated experience supporting Authority to Operate (ATO) and authorization activities and working directly with ISSMs, CISOs, Authorizing Officials, System Owners, and other Government cybersecurity stakeholders.


• Experience leading Continuous Monitoring (ConMon), vulnerability management, security assessments, audits, inspections, and cybersecurity remediation activities.


• Demonstrated ability to lead and mentor cybersecurity/ISSO personnel while maintaining hands-on technical responsibilities.


• Experience with Federal cybersecurity standards and frameworks, including NIST SP 800-53, NIST RMF, FISMA, and applicable Federal and DoD cybersecurity policies.


• Working knowledge of enterprise cybersecurity technologies and platforms, including CSAM, Splunk, ServiceNow, Tenable/Nessus or Qualys, Microsoft Defender, Microsoft Intune, BigFix, Microsoft Azure, Microsoft 365, Microsoft Entra ID, Okta, Palo Alto Panorama, and Zscaler, with specific tools subject to task-order requirements.