Information System Security Officer

The Red Gate Group is seeking an experienced Information System Security Officer (ISSO) to support the Defense Intelligence Agency (DIA) in Washington, DC. In this role, you will apply deep expertise in Risk Management Framework (RMF) and Information Assurance (IA) to safeguard mission-critical systems. As part of DIA’s CIO team, you will guide projects through the security lifecycle, ensuring that applications, cloud environments, and IT systems remain secure, compliant, and resilient against emerging threats.This position is ideal for a seasoned ISSO who thrives in fast-paced environments, enjoys working across diverse technical teams, and is motivated by the opportunity to directly protect national security missions.Key ResponsibilitiesApply knowledge of IA and RMF concepts, practices, and procedures to minimize and mitigate security risks.Partner with architects, engineers, and security specialists to ensure proper security controls across all IT systems, applications, and cloud environments.Guide systems through the Assessment and Authorization (A&A) process to achieve Authorization to Operate (ATO).Monitor and remediate vulnerabilities, intrusion detection events, and remote access security.Develop, review, and update security documentation, including system security plans, test plans, and related RMF artifacts.Support continuous monitoring (ConMon) and continuous diagnostics and mitigation (CDM) activities.Ensure compliance with reporting requirements for ODNI/IC CIO and DIA Enterprise Audit Program.Define and implement security standards for AWS and Azure cloud environments.Develop and manage Plans of Action and Milestones (POA&M), waiver requests, audit policies, and ITA system security checklists.Support contingency operations, disaster recovery planning, and DevSecOps security reviews.Conduct risk assessments, audit reviews, and logging analysis (e.g., SPLUNK, AWS, Azure consoles).Participate in Scrum, stand-ups, and TEMs, providing security guidance throughout project lifecycles.Review technical documentation to ensure compliance with security standards.Perform additional RMF and security tasks as assigned.