The ISSO plans, implements, and maintains the Risk Management Framework for assigned systems; develops security documentation including SSPs, SARs, and POA&Ms; supports the ISSM; collaborates with system owners and security professionals; provides training and briefings; and ensures compliance with DoD and DoN cybersecurity policies.
Overview
About Falconwood, Inc: Falconwood, Inc. is a small, woman/veteran-owned business providing executive level consultants and programmatic support to Department of Defense Information Technology (IT) initiatives and programs. We provide expert consultation on a diverse range of IT subjects focusing on programmatic, acquisition strategy, implementation activities and Information Assurance policy and engineering. We support the total lifecycle of Information Technology systems and applications. We have an opening for an Information Systems Security Officer (ISSO), supporting the Navy and Marine Corps Intranet (NMCI) Program. If you want to be part of a dynamic team and provide yourself with a daily challenge, this job is for you.
ResponsibilitiesThe Information System Security Officer (ISSO) will:
- Plan, implement, and maintain all phases of the Risk Management Framework (RMF) for assigned systems
- Assist in the development and maintenance of security documentation, including System Security Plans (SSPs), Security Assessment Reports (SARs), and Plans of Action and Milestones (POA&Ms)
- Work closely with the Information System Security Manager (ISSM) in executing their duties and responsibilities
- Collaborate with system owners, stakeholders, and other security professionals
- Provide security guidance and training to system users
- Prepare and present security briefings to management
- Ensure compliance with all Department of Defense (DoD) and Department of Navy (DoN) cybersecurity policies
- Ensure relevant policy and procedural documentation is current and accessible to properly authorized individuals
- Active DoD Secret clearance required
- Minimum of 3+ years of experience as an ISSO in a DoD environment; Experience with NMCI is a plus
- Bachelor's degree in Computer Science, Cybersecurity, or a related field (relevant experience may be substituted for education).
- Preferred Certifications: DoD 8570 IAM Level I certification
- Strong understanding of the RMF and NIST 800-53 security controls
- Experience with security assessment tools and techniques
- Excellent written and verbal communication skills
- Strong analytical and problem-solving skills
- Ability to work independently and as part of a team
- No travel required
$115,000 - $130,000 (based on existing skills and experience)
Similar Jobs
Information Technology • Consulting • Defense
The ISSO leads cybersecurity compliance and RMF activities for DHS information systems, including ATOs, system security plans, POA&Ms, configuration management, risk and vulnerability assessments, continuous monitoring, incident and contingency planning, access controls, inventory management, and FISMA reporting. The role advises system owners and executives, coordinates remediation, and ensures compliance with FISMA, NIST, DHS 4300 Series, and related directives.
Top Skills:
Authority To Operate (Ato)Cloud SecurityCsamDhs 4300 SeriesEmassEncryptionFedrampFismaGrc ToolsNist Sp 800-37Nist Sp 800-53RegscaleRisk Management Framework (Rmf)
Information Technology • Consulting • Defense
Manages cybersecurity compliance and risk activities for DHS information systems, including RMF and ATO processes, security control implementation, SSPs, POA&Ms, configuration management, continuous monitoring, vulnerability assessments, contingency planning, and incident response. Advises system owners and executives, supports audits and assessments, maintains inventories and FISMA scorecards, and ensures compliance with FISMA, NIST, DHS 4300 Series, and related directives.
Top Skills:
Configuration Management PlansCsamDhs 4300 SeriesEmassFedrampFismaNist Sp 800-37Nist Sp 800-53Poa&MsRegscaleRisk Management Framework (Rmf)System Security Plans (Ssps)
Information Technology • Legal Tech • Analytics
Leads security compliance for a FedRAMP-authorized cloud environment. Maintains the ATO, coordinates continuous monitoring, assessments, audits, penetration testing, risk reviews, POA&M remediation, security documentation, and NIST control implementation. Partners with engineering, DevOps, cloud operations, compliance, and government stakeholders to support incident response, secure system changes, cloud deployments, and audit readiness.
Top Skills:
AWSAzureCloud-Native Security ServicesEndpoint Detection And Response (Edr)FedrampFismaGCPGovernance Risk And Compliance (Grc) ToolsIdentity And Access Management (Iam)Nist 800-171Nist 800-37 Risk Management FrameworkNist Sp 800-53SIEMVulnerability ScannersZero Trust Architecture
What you need to know about the Austin Tech Scene
Austin has a diverse and thriving tech ecosystem thanks to home-grown companies like Dell and major campuses for IBM, AMD and Apple. The state’s flagship university, the University of Texas at Austin, is known for its engineering school, and the city is known for its annual South by Southwest tech and media conference. Austin’s tech scene spans many verticals, but it’s particularly known for hardware, including semiconductors, as well as AI, biotechnology and cloud computing. And its food and music scene, low taxes and favorable climate has made the city a destination for tech workers from across the country.
Key Facts About Austin Tech
- Number of Tech Workers: 180,500; 13.7% of overall workforce (2024 CompTIA survey)
- Major Tech Employers: Dell, IBM, AMD, Apple, Alphabet
- Key Industries: Artificial intelligence, hardware, cloud computing, software, healthtech
- Funding Landscape: $4.5 billion in VC funding in 2024 (Pitchbook)
- Notable Investors: Live Oak Ventures, Austin Ventures, Hinge Capital, Gigafund, KdT Ventures, Next Coast Ventures, Silverton Partners
- Research Centers and Universities: University of Texas, Southwestern University, Texas State University, Center for Complex Quantum Systems, Oden Institute for Computational Engineering and Sciences, Texas Advanced Computing Center
