ISSO

Zachary Piper Solutions is currently seeking an ISSO to support the Office of the Under Secretary of War for Acquisition & Sustainment (OUSW(A&S)). This is a hybrid position reporting onsite 1-2 times per week in Alexandria, VA. This position supports cybersecurity operations by providing leadership across the full DoD Risk Management Framework (RMF) lifecycle for multiple information systems supporting Controlled Unclassified Information (CUI) through classified environments. The ISSO serves as the primary cybersecurity advisor responsible for ensuring systems remain secure, compliant, and mission-ready by leading Assessment & Authorization (A&A), Continuous Monitoring (ConMon), cybersecurity governance, and risk management activities.

Key Responsibilities:

• Serve as the ISSM for multiple DoD information systems supporting OUSW(A&S) mission requirements.
• Lead all phases of the DoD Risk Management Framework (RMF), including system categorization, control implementation, assessment, authorization, and continuous monitoring.
• Develop and maintain RMF authorization packages, including System Security Plans (SSPs), Security Assessment documentation, Plans of Action & Milestones (POA&Ms), Continuous Monitoring artifacts, and supporting Body of Evidence (BoE).
• Coordinate Assessment & Authorization (A&A) activities supporting Authorization to Operate (ATO), Interim Authorization to Test (IATT), Authorization to Operate with Conditions (ATO-C), and system reauthorization.
• Manage Continuous Monitoring (ConMon), vulnerability management, STIG compliance, security control implementation, and cybersecurity reporting.
• Conduct cybersecurity risk assessments and provide recommendations supporting Authorizing Official (AO) risk decisions. 
• Coordinate Security Control Assessments (SCAs), validate remediation activities, and ensure timely closure of assessment findings.
• Review system architectures, authorization boundaries, data flows, and proposed changes to maintain cybersecurity compliance. 
• Provide cybersecurity guidance to Government leadership, Program Managers, engineers, ISSOs, ISSEs, and system administrators.
• Prepare executive briefings, authorization recommendations, and cybersecurity status reports for senior Government leadership.
• Support implementation of Zero Trust Architecture (ZTA), cloud security, DevSecOps, reciprocity, inherited controls, and enterprise cybersecurity governance initiatives.

Requirements:

• Active Top Secret Clearance
• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Engineering, or related field (or equivalent experience) 
• Minimum 5 years supporting DoD RMF and Assessment & Authorization activities
• Experience managing multiple RMF authorization packages and briefing senior Government leadership Excellent analytical, written, verbal, and presentation skills 
• Candidates should meet applicable DoD 8140 Cyber Workforce Qualification Program requirements.

Preferred certifications include: 

• Certified Information Systems Security Professional (CISSP)
• Certified Information Security Manager (CISM)
• CompTIA CASP+
• Certified Cloud Security Professional (CCSP)

Compensation to include:

• Salary Range: $130,000 – $150,000 (depending on experience)
• Full Benefits: Medical, Dental, Vision, 401K, PTO, Sick Leave if Required by Law

This job opens for applications on August 26, 2026. Applications for this job will be accepted for at least 30 days from the posting date.

#LI-CB1

#LI-HYBRID

Keywords: Cybersecurity, ISSO, ATO, Assessment and Authorization, Risk Management Framework, RMF, NIST, FISMA, DOE, NNSA, Compliance, POA&M, Vulnerability Management, Incident Response, Security Documentation, System Security Plans, Continuous Monitoring, Cyber Risk Assessment, Federal Security, Information Assurance, Security Operations, Policy Development, Threat Mitigation, Authorization to Operate, top secret