Information System Security Officer (SME), Level III
- Compensation
- Not disclosed
- Location
- Baltimore, MD, US
- Work setup
- Not specified
- Seniority
- Not specified
- Employment
- Contract
- Experience
- Not specified
- Category
- Security
- Posted
Skills
Must have
- Ten (10) or more years of cybersecurity experience, including at least five (5) years serving as an ISSO or equivalent with direct ownership of federal A&A packages.
- Demonstrated record of carrying systems to an ATO decision and sustaining authorization through continuous monitoring.
- Experience managing POA&Ms from identification through closure, including waiver and risk acceptance packages.
- Experience conducting Security Impact Assessments and participating in formal change control processes.
- Experience developing interconnection documentation (ISAs, MOUs, SLAs) and contingency/disaster recovery documentation and testing.
Nice to have
- Prior USCG, DHS, or DoD ISSO experience, particularly with Surface Domain OT or Platform IT systems.
- Familiarity with COMDTINST M2620.2 (series) and COMDTINST 5500.13 (series).
- Experience with OT/ICS or PIT systems where conventional endpoint agents cannot be deployed and compensating controls are required.
- CGRC (formerly CAP) or CISM in addition to the required baseline certification.
- Experience supporting DHS SELC-aligned acquisitions.
- Master's degree in cybersecurity, information systems, or a related field.
Full description
We are an employee-centric company that truly values our team members and the contributions they make to our customers and the missions they support. We pride ourselves on being forward-leaning thinkers and on building teams that are, and continue to be, technically proficient across a broad range of cyber mission areas. OneZero full-time employees receive a highly competitive benefits package, including health, dental, vision, and life insurance, a 401(k) with company matching, paid time off and holidays, an employee referral program, and educational assistance. Additional details are available on our website:
Position Title: Information System Security Officer (SME), Level III
Location: USCG Surface Forces Logistics Center, 2401 Hawkins Point Road, Baltimore, MD 21226. Work may also be performed at the SFLC satellite offices at 707 East Ordnance Road, approximately one mile from the primary site, and at other sites as determined necessary by the Contracting Officer's Representative (COR).
Clearance:
- No security clearance required. This position does not involve access to classified information or classified IT systems.
- S. citizenship is required in accordance with HSAR 3052.204-71 Alternate I.
Position Summary
The senior Information System Security Officer serves as the designated ISSO for assigned USCG SFLC Operational Technology and Platform IT systems and leads the Risk Management Framework process for that portfolio. The role owns the authorization packages end to end: preparation, submission, continuous monitoring, POA&M management, and sustainment of the Authorization to Operate.
As the SME-level ISSO on the task order, this position also sets the technical standard for the Level 2 ISSOs, handles the most complex or highest-visibility systems, and is the primary ISSO interface to the OT Security Manager (ISSM) on policy, risk posture, and authorization strategy.
Key Responsibilities
- Serve as the designated OT Security Officer (ISSO) for assigned SFLC Operational Technology and lead the RMF process for those systems.
- Support the OT Security Manager (ISSM) and staff in maintaining the programs, procedures, and policies that protect Government Sensitive But Unclassified (SBU) information.
- Review existing policies, procedures, and guidelines for compliance with DHS, USCG, and DoD cybersecurity policy; draft or revise SFLC policy documentation for ISSM review and approval.
- Prepare and maintain RMF security authorization documentation for assigned OT, ensuring Assessment and Authorization (A&A) packages are completed and submitted to the Authorizing Official in sufficient time to prevent expiration of the Authorization to Operate (ATO).