# Information System Security Officer (ISSO)

**Company**: GDIT
**Location**: McLean, VA
**Work arrangement**: onsite
**Experience**: senior
**Job type**: full-time
**Salary**: $186,542 - $252,380
**Category**: Security
**Industry**: Technology

**Apply**: https://gdit.wd5.myworkdayjobs.com/en-US/External_Career_Site/job/USA-VA-McLean/Sr-Principal-Information-System-Security-Officer--ISSO---Full-Scope-Polygraph-Clearance-Required-_RQ231402-2?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply
**Canonical**: https://yubhub.co/jobs/job_5fddc22e-73c

## Description

GDIT is seeking a highly skilled and multi-faceted Information System Security Officer (ISSO) for a critical contract role supporting a commercial cloud service provider's mission-critical systems. This position requires the employee to report full time on site in McLean, VA.

The ideal candidate is a proactive and seasoned professional with extensive, hands-on experience navigating the FedRAMP, Impact Level 6 (IL6), and Risk Management Framework (RMF) requirements for classified commercial cloud services and cross domain solutions. This role requires a unique blend of technical engineering prowess, security assessment and auditing skills, deep expertise in continuous monitoring, and the polish to communicate risk to executive leadership. You will be a key contributor to our Governance, Risk, and Compliance (GRC) program, supporting the Information System Security Manager (ISSM) and ISSO Lead in ensuring the unyielding security and integrity of mission-critical systems.

The ISSO will support the following key areas:

- RMF & Assessment and Authorization (A&A)

- Security Engineering & System Hardening

- Security Control Assessor (SCA) & Auditing

- Continuous Monitoring & GRC

Additionally, the ISSO will:

- Support Assessment & Authorization (A&A) execution for classified commercial cloud service offerings, and Cross Domain Solutions (CDS) as needed, through the entire respective FedRAMP/DoW IL6 and/or RMF lifecycles to obtain and maintain the applicable authorizations.

- Assist in maintaining a comprehensive body of evidence for A&A packages.

- Support the monthly and overall FedRAMP/DoW IL6, CDS as needed, and IC Continuous Monitoring requirements.

- Work with security engineering to proactively identify and assess vulnerabilities related to scans, STIGs, security controls, etc.

- Support assessment preparation for security control audits, traditional security reviews, and formal inspections, including preparing for and executing FedRAMP/IL6 third-party assessment organization (3PAO) assessments, DoW CDS assessments as needed, and IC assessments.

- Meticulously review artifacts, logs, and system configurations to ensure they provide sufficient evidence of compliance.

- Coordinate and/or participate in security testing and penetration testing activities to provide an independent validation of the system's security posture.

**WHAT YOU’LL NEED TO SUCCEED - REQUIRED:**

- Security clearance level: Must possess a current and active Top Secret SCI Full-Scope Polygraph clearance

- Certifications: Must be DoW 8140 / 8570.01-M compliant

- Education: BA/BS Degree or equivalent experience in lieu of degree

- Experience: 5+ years of related experience

- Technical skills:

- Expert-level knowledge of the complete NIST SP 800 series (especially 800-37, 800-53, 800-30) and risk management principles.

- Progressive experience in information assurance and cybersecurity roles.

- Direct, hands-on experience as an ISSO or ISSM, with a proven track record of successfully supporting ATO for classified systems under IL6, DoW RMF, and/or ICD 503 policies.

- Extensive, hands-on experience navigating the FedRAMP, DoW Impact Level 6 (IL6), and Risk Management Framework (RMF) requirements for classified commercial cloud services and cross domain solutions.

- Location: Onsite in McLean, VA

**DESIRED QUALIFICATIONS:**

- Certifications: CISSP (Certified Information Systems Security Professional)

The likely salary range for this position is $186,542 - $252,380. This is not, however, a guarantee of compensation or salary. Rather, salary will be set based on experience, geographic location and possibly contractual requirements and could fall outside of this range.

## Skills

### Required
- Information Assurance
- Penetration Testing
- Risk Assessments
- Security Evaluations
- Security Reviews
- NIST SP 800 series
- risk management principles
- cybersecurity
- FedRAMP
- DoW Impact Level 6 (IL6)
- Risk Management Framework (RMF)

### Nice to have
- CISSP (Certified Information Systems Security Professional)

---

Source: [Apply at gdit.wd5.myworkdayjobs.com](https://gdit.wd5.myworkdayjobs.com/en-US/External_Career_Site/job/USA-VA-McLean/Sr-Principal-Information-System-Security-Officer--ISSO---Full-Scope-Polygraph-Clearance-Required-_RQ231402-2?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)