The ISSO plans, implements, and maintains the Risk Management Framework for assigned systems; develops security documentation including SSPs, SARs, and POA&Ms; supports the ISSM; collaborates with system owners and security professionals; provides training and briefings; and ensures compliance with DoD and DoN cybersecurity policies.
Overview
About Falconwood, Inc: Falconwood, Inc. is a small, woman/veteran-owned business providing executive level consultants and programmatic support to Department of Defense Information Technology (IT) initiatives and programs. We provide expert consultation on a diverse range of IT subjects focusing on programmatic, acquisition strategy, implementation activities and Information Assurance policy and engineering. We support the total lifecycle of Information Technology systems and applications. We have an opening for an Information Systems Security Officer (ISSO), supporting the Navy and Marine Corps Intranet (NMCI) Program. If you want to be part of a dynamic team and provide yourself with a daily challenge, this job is for you.
ResponsibilitiesThe Information System Security Officer (ISSO) will:
- Plan, implement, and maintain all phases of the Risk Management Framework (RMF) for assigned systems
- Assist in the development and maintenance of security documentation, including System Security Plans (SSPs), Security Assessment Reports (SARs), and Plans of Action and Milestones (POA&Ms)
- Work closely with the Information System Security Manager (ISSM) in executing their duties and responsibilities
- Collaborate with system owners, stakeholders, and other security professionals
- Provide security guidance and training to system users
- Prepare and present security briefings to management
- Ensure compliance with all Department of Defense (DoD) and Department of Navy (DoN) cybersecurity policies
- Ensure relevant policy and procedural documentation is current and accessible to properly authorized individuals
- Active DoD Secret clearance required
- Minimum of 3+ years of experience as an ISSO in a DoD environment; Experience with NMCI is a plus
- Bachelor's degree in Computer Science, Cybersecurity, or a related field (relevant experience may be substituted for education).
- Preferred Certifications: DoD 8570 IAM Level I certification
- Strong understanding of the RMF and NIST 800-53 security controls
- Experience with security assessment tools and techniques
- Excellent written and verbal communication skills
- Strong analytical and problem-solving skills
- Ability to work independently and as part of a team
- No travel required
$115,000 - $130,000 (based on existing skills and experience)
Similar Jobs
Information Technology • Consulting • Defense
The ISSO manages information system security and compliance for a DoD customer. Responsibilities include maintaining RMF or DIACAP authorization packages, enforcing security policies, monitoring vulnerabilities and incidents, supporting CORA and cATO continuous monitoring, managing NIST controls and configuration changes, and reporting system security status. The role requires extensive classified-environment experience, DoD security certification, a Secret clearance, strong communication skills, and the ability to lead tasks independently.
Top Skills:
CatoCloud ComputingContinuous MonitoringCoraDevsecopsDiacapDisa AssistDod Risk Management Framework (Rmf)EmassEnterprise ItsmIavaItilNist Sp 800-53 Revision 5Vdi
Information Technology • Consulting • Defense
The ISSO leads cybersecurity compliance and RMF activities for DHS information systems, including ATOs, system security plans, POA&Ms, configuration management, risk and vulnerability assessments, continuous monitoring, incident and contingency planning, access controls, inventory management, and FISMA reporting. The role advises system owners and executives, coordinates remediation, and ensures compliance with FISMA, NIST, DHS 4300 Series, and related directives.
Top Skills:
Authority To Operate (Ato)Cloud SecurityCsamDhs 4300 SeriesEmassEncryptionFedrampFismaGrc ToolsNist Sp 800-37Nist Sp 800-53RegscaleRisk Management Framework (Rmf)
Information Technology • Legal Tech • Analytics
Leads security compliance for a FedRAMP-authorized cloud environment. Maintains the ATO, coordinates continuous monitoring, assessments, audits, penetration testing, risk reviews, POA&M remediation, security documentation, and NIST control implementation. Partners with engineering, DevOps, cloud operations, compliance, and government stakeholders to support incident response, secure system changes, cloud deployments, and audit readiness.
Top Skills:
AWSAzureCloud-Native Security ServicesEndpoint Detection And Response (Edr)FedrampFismaGCPGovernance Risk And Compliance (Grc) ToolsIdentity And Access Management (Iam)Nist 800-171Nist 800-37 Risk Management FrameworkNist Sp 800-53SIEMVulnerability ScannersZero Trust Architecture
What you need to know about the NYC Tech Scene
As the undisputed financial capital of the world, New York City is an epicenter of startup funding activity. The city has a thriving fintech scene and is a major player in verticals ranging from AI to biotech, cybersecurity and digital media. It also has universities like NYU, Columbia and Cornell Tech attracting students and researchers from across the globe, providing the ecosystem with a constant influx of world-class talent. And its East Coast location and three international airports make it a perfect spot for European companies establishing a foothold in the United States.
Key Facts About NYC Tech
- Number of Tech Workers: 549,200; 6% of overall workforce (2024 CompTIA survey)
- Major Tech Employers: Capgemini, Bloomberg, IBM, Spotify
- Key Industries: Artificial intelligence, Fintech
- Funding Landscape: $25.5 billion in venture capital funding in 2024 (Pitchbook)
- Notable Investors: Greycroft, Thrive Capital, Union Square Ventures, FirstMark Capital, Tiger Global Management, Tribeca Venture Partners, Insight Partners, Two Sigma Ventures
- Research Centers and Universities: Columbia University, New York University, Fordham University, CUNY, AI Now Institute, Flatiron Institute, C.N. Yang Institute for Theoretical Physics, NASA Space Radiation Laboratory
