Information System Security Officer - ISSO
About the job
- A bachelor's degree in computer science, information technology, communications systems management, or an equivalent science, technology, engineering, and mathematics degree from an accredited college or university.
- Six years of experience implementing and coordinating cybersecurity policies across organizational levels and ensuring compliance with Department of Defense and federal standards.
- Experience conducting vulnerability assessments, threat analyses, and risk mitigation activities.
- Ability to support cyber incident response by isolating affected assets, performing initial investigations, collecting data, and providing detailed status reports.
- Meet Department of Defense Information Assurance Manager Level II baseline requirements by holding one or more of the following certifications: CAP, CASP+ CE, CISM, CISSP or CISSP Associate, GSLC, CCISO, or HCISPP.
- Meet operating system and computing environment qualification requirements as directed by the Privileged Access Agreement and DFARS 252.239-7001.
- Hold a current and active Department of Defense Top Secret security clearance.
- Be proficient with modern information technology tools and infrastructure technologies.
- Comply with vaccination and medical requirements for temporary duty or overseas roles, as applicable.
- Be able to work in an office environment, sitting at a desk and looking at a computer for most of the workday.
- Successfully complete a background investigation; drug screening may be required for federal contract compliance.
- Serve as an Information System Security Officer supporting Risk Management Framework compliance and cybersecurity for Department of Defense systems.
- Implement and monitor security controls to ensure adherence to National Institute of Standards and Technology Special Publication 800-53 and Department of Defense policies.
- Conduct vulnerability assessments, threat analyses, and continuous monitoring using ACAS, STIG Viewer, and eMASS.
- Support incident response activities, including isolating assets, collecting data, and reporting findings.
- Maintain Risk Management Framework documentation, including system security plans, plans of action and milestones, and risk assessment reports, and keep system accreditation packages current.
- Collaborate with system owners, administrators, and the Information System Security Manager to sustain system security posture.
- Track, report, and resolve cybersecurity findings while preparing for audits and inspections.
- Travel short distances to offices, conference rooms, and buildings on site as required.
About the company
Cambridge International Systems delivers capacity-building and security solutions across cyber and physical domains, serving sectors like critical infrastructure, border security, aviation, threat finance, banking, and health security worldwide. It uses holistic discovery to understand complex environments and deploys integrated, multi-domain solutions that address people, processes, and technology, with advisory, implementation, and ongoing support to build capabilities. The firm differentiates itself with nearly 30 years of experience in high-stakes environments at the intersection of cyber and physical security, offering end-to-end capacity-building rather than isolated tools. Its goal is to reduce risk from sophisticated threats and enable successful operations by strengthening security, resilience, and capabilities across organizations and critical systems.
Company Size
201-500
Company Stage
N/A
Total Funding
N/A
Headquarters
Arlington, West Virginia
Founded
1994
Get referred to Cambridge International Systems Inc
See people who can refer or advise you
Simplify's Take
What believers are saying
- 2026 headquarters move to Tysons Corner signals continued investment and hiring proximity.
- FY2026 awarded $10.7 million year-to-date, showing continued federal demand.
- Recent wins in Navy fiber, DoD logistics, and border/security work sustain backlog.
What critics are saying
- 2025 bribery guilty plea and $2.25 million fine damage credibility with Navy customers.
- Former executive Russell Thurston tied Cambridge to bribery; compliance monitoring now matters immediately.
- Dependence on federal contracting leaves Cambridge vulnerable if DOJ or debarment actions escalate.
What makes Cambridge International Systems Inc unique
- CMMC Level 2 certification and CSfC Trusted Integrator status strengthen federal trust.
- OASIS+ IDIQ in 2025 expands access across DoD and civilian agencies.
- Deep defense portfolio spans aviation, C6ISR, cybersecurity, and logistics worldwide.
Help us improve and share your feedback! Did you find this helpful?
Benefits
- Professional Development Budget