173039

Zachary Piper Solutions is seeking a Information System Security Officer (ISSO) to support Office of the Under Secretary of War in Alexandria, VA. We are seeking an individual to lead Risk Management Lifecycle efforts supporting Controlled Unclassified Information through classified environments for the Acquisition & Sustainment branch. Details below:

Clearance: Top Secret, SCI eligibility

Location: Alexandria, VA (Hybrid - 1x/week onsite)

This job opens for applications on 8/27/2026. Applications for this job will be accepted for at least 30 days from the posting date

Responsibilities:

• Serve as the lead cybersecurity advisor, overseeing Assessment & Authorization (A&A), Continuous Monitoring (ConMon), governance, and risk management activities.
• Partner with Program Managers, ISOs, engineers, SCAs, AOs, and government leadership to integrate cybersecurity across the system lifecycle.
• Lead all phases of the DoD Risk Management Framework (RMF), including categorization, control implementation, assessment, authorization, and continuous monitoring.
• Develop and maintain RMF artifacts, including SSPs, POA&Ms, assessment documentation, ConMon records, and supporting evidence.
• Coordinate A&A activities supporting ATOs, IATTs, ATO-Cs, and system reauthorizations.
• Manage continuous monitoring, vulnerability management, STIG compliance, security controls, and cybersecurity reporting.
• Conduct risk assessments and provide recommendations to support Authorizing Official (AO) decisions.
• Coordinate Security Control Assessments (SCAs), validate corrective actions, and track remediation efforts.
• Review system architectures, authorization boundaries, and system changes to ensure ongoing compliance.
• Prepare executive briefings, authorization recommendations, and cybersecurity status reports.
• Support Zero Trust, cloud security, DevSecOps, reciprocity, inherited controls, and enterprise cybersecurity initiatives.

Qualifications:

• Bachelors degree and 8+ years of experience supporting cybersecurity programs conducting A&A activities
• Active Top Secret w/ SCI eligibility Certifications:
• IAT III (CISSP, CISM, CASP+, CCSP, etc.)
• Experience mangining multiple RMF authorization packages
• Experience briefing Government leadership and preparing documentation
• Experience implementing Zero Trust architecture and cloud security

Compensation:

• Total compensation based on experience level - $130,000-$150,000+
• Full Benefits: PTO, Holidays, 401K, Medical Dental Vision coverage, Certification Reimbursement
• Hybrid work environment
• Contract stability and mobility through Zachary Piper Solutions

#LI-MK1 #LI-Onsite #LI-Hybrid

Keywords: Cybersecurity, Information Assurance, Risk Management Framework (RMF), Assessment and Authorization (A&A), Continuous Monitoring (ConMon), Authorization to Operate (ATO), Interim Authorization to Test (IATT), top secret, ts/sci, top secret/sci, polygraph, ts/sci, W2, opentowork, hiring, onsite, arlington, government, Federal, ATO with Conditions (ATO-C), Security Control Assessments (SCA), Cybersecurity Governance, Risk Management, Security Compliance, NIST RMF, DoD RMF, System Security Plans (SSP), Plans of Action and Milestones (POA&M), Security Assessment Reports (SAR), Body of Evidence (BoE), Vulnerability Management, STIG Compliance, Security Controls, Control Implementation, Risk Assessments, Risk Analysis, Authorization Packages, Cybersecurity Reporting, Audit Readiness, Security Accreditation, Continuous Authorization, Information System Security Officer (ISSO), Information System Security Engineer (ISSE), Authorizing Official (AO) Support, Security Engineering, System Architecture Reviews, Authorization Boundaries, Data Flow Analysis, Remediation Management, Corrective Action Tracking, Governance, Risk and Compliance (GRC), Federal Cybersecurity Compliance, Zero Trust Architecture (ZTA), Cloud Security, DevSecOps, Control Inheritance, Reciprocity, Enterprise Cybersecurity, Security Documentation, Executive Briefings, Stakeholder Engagement, Program Management Support, Security Strategy, Compliance Monitoring, Security Operations, Cyber Risk Management, Mission Assurance, Regulatory Compliance, Defense Cybersecurity, Security Lifecycle Management