Information Systems Security Officer (ISSO) - TS/SCI with Polygraph

Type of Requisition:

Regular

Clearance Level Must Currently Possess:

Top Secret/SCI

Clearance Level Must Be Able to Obtain:

Top Secret SCI + Polygraph

Public Trust/Other Required:

None

Job Family:

Cyber and IT Risk Management

Job Qualifications:

Skills:

Computer Security, Information Systems, Information System Security

Certifications:

None

Experience:

5 + years of related experience

US Citizenship Required:

Yes

Job Description:

*Position is currently located in Elkridge, MD and will relocate to another site in the National Capital Region in 2026.*

As an Information System Security Officer (ISSO) at GDIT, you'll be a key part of a focused team dedicated to securing our nation’s most critical systems. We need a detail-oriented professional with a strong technical background who can not only manage security policies but also get hands-on with the systems themselves. You'll be the one translating complex security requirements into real-world solutions and ensuring our infrastructure is both compliant and resilient. If you're ready to make a tangible impact by applying your skills to a mission-critical environment, this is the role for you.    

  

HOW AN INFORMATION SYSTEM SECURITY OFFICER WILL MAKE AN IMPACT  

• Serve as a principal advisor on all matters, technical and otherwise, involving the security of Information Technology Division information systems.  

• Implement Risk Management Framework (RMF) in accordance with NIST SP 800-37.  Ensure all security controls are robust and effective by independently conducting security control assessments, gathering comprehensive evidence, and ensuring systems are compliant with all standards. You'll take ownership of the security package, ensuring all NIST SP 800-53 controls are applied. 

• Independently identify security vulnerabilities and propose alternative solutions that still achieve the required security intent, ensuring all NIST SP 800-53. 

• Directly assess system configurations and ensure compliance with security baselines like Security Technical Implementation Guides (STIGs). 

• Create, edit, and maintain a wide range of security documentation from scratch, including System Security Plans (SSPs), and Plans of Actions and Milestones (POA&Ms).  

• Collaborate directly with engineering and development teams to implement your security designs and troubleshoot complex issues. 

• Apply specific functional, working and general industry knowledge.   

• Develop or contribute to solutions to a variety of problems of moderate scope and complexity.   

• Work independently with some guidance. May review or guide activities of more junior employees.  

• Provide leadership briefs, reports, and supporting documentation regarding the status of applicable systems and their progression through the client’s RMF process.  

• Ensure all network, system, application, or service users have the requisite security clearances, authorization, need-to-know, and security responsibility awareness prior to granting access to ITD information systems.   

• Research and remediate security vulnerability findings for applicable systems within the ITD as documented in the Security Assessment Report (SAR) and its Plan of Actions and Milestones (POA&M).  <