Senior Information System Security Officer (ISSO)

General Summary: COLSA is seeking a Senior Information System Security Officer (ISSO) supports the cybersecurity authorization, assessment, and continuous monitoring of Army information systems. This position provides senior-level technical and programmatic expertise across all RMF phases, including security documentation development, control implementation and validation, security assessment support, remediation tracking, and ongoing compliance monitoring.

The successful candidate will have prior experience work with system owners, security control assessors, engineers, administrators, and program stakeholders to ensure systems maintain an acceptable security posture and meet applicable Army cybersecurity and RMF requirements. This role requires extensive experience supporting complex environments, including public-facing components, and managing security vulnerabilities, findings, and Plans of Action and Milestones (POA&Ms).

Knowledge of, or experience applying, artificial intelligence (AI), automation, or advanced analytics to improve cybersecurity operations is highly preferred. This may include using AI-enabled tools to support vulnerability prioritization, security documentation review, continuous monitoring, risk analysis, compliance reporting, and remediation tracking.

Principal Duties and Responsibilities (*Essential Functions): Develop, maintain, and update RMF documentation, including System Security Plans (SSPs), security assessment artifacts, control implementation statements, risk assessments, continuous monitoring plans, and POA&Ms. Coordinate with system owners, information system security managers, engineers, administrators, and assessors to implement and validate security controls.

Review and analyze vulnerability scan results, compliance findings, and security assessment results to identify risks and develop remediation recommendations. Use Assured Compliance Assessment Solution (ACAS), Cyber Management Review System (CMRS), Security Technical Implementation Guides (STIGs), and related cybersecurity tools to assess and improve system security posture.

Track vulnerabilities, findings, waivers, exceptions, and remediation activities; manage POA&Ms through closure or risk acceptance by the appropriate authority. Support the security of public-facing systems and components by identifying, documenting, and mitigating risks associated with externally accessible services.

Perform continuous monitoring activities, including periodic control reviews, vulnerability management, configuration compliance reviews, and security artifact updates. Prepare senior-level status reports, risk summaries, briefings, and recommendations for program leadership and cybersecurity stakeholders. Provide technical guidance and mentorship to junior RMF, ISSO, and cybersecurity personnel At COLSA, people are our most valuable resource and centered at our core value.

We invite you to unite your talents with opportunity and be a part of our “Family of Professionals!” Learn about our employee-centric culture and benefits here: https://www.colsa.com/culture_benefits