Information Systems Security Officer labor category
Information Systems Security Officer is a government contracting labor category with levels I through IV. GSA ceiling rates run about $100–$233/hr depending on level. That's what the government pays the contractor, not your salary.
Updated Oct 21, 2026 · Data: GSA CALC+
What a Information Systems Security Officer does
They are responsible for managing the authorization to operate process, documenting security controls, and ensuring that systems meet the rigorous requirements set forth by frameworks such as the Risk Management Framework. These professionals translate complex regulatory policies into actionable technical requirements for IT teams. In terms of career progression, entry-level ISSOs typically manage smaller, less complex systems with oversight from senior staff. As you gain experience, education, and professional certifications, you move into mid-level and senior roles where you might manage enterprise-wide system portfolios, lead audit responses, or oversee large-scale security architecture changes. For transitioning service members, this role is a natural transition from military cyber, communications, or intelligence operations roles that required maintaining operational security and compliance within strict regulatory environments.
Typical Information Systems Security Officer duties
- Manage and maintain the security documentation and authorization packages for federal information systems.
- Conduct regular vulnerability assessments and coordinate with technical teams to ensure timely remediation of security gaps.
- Develop and enforce security policies, procedures, and internal controls in alignment with federal cybersecurity mandates.
- Monitor system security logs and audit trails to detect unauthorized activity and potential security incidents.
- Coordinate with third-party auditors and government stakeholders during periodic security inspections and continuous monitoring reviews.
Information Systems Security Officer levels, requirements, and GSA CALC+ rates
Levels map to years of relevant experience. A degree can substitute for years (about 2 years per step).
| Level | Experience | Most common education | GSA ceiling rate, 25th–75th ($/hr) | GSA ceiling rate, median ($/hr) | Rough salary estimate |
|---|---|---|---|---|---|
| Level I | 0–3 yrs | Bachelors | $100/hr – $150/hr | $122/hr | $106k–$141k |
| Level II | 4–7 yrs | Bachelors | $117/hr – $180/hr | $147/hr | $127k–$170k |
| Level III | 8–12 yrs | Bachelors | $159/hr – $233/hr | $186/hr | $161k–$215k |
| Level IV | 13+ yrs | Bachelors | $136/hr – $190/hr | $173/hr | $150k–$200k |
- Most common education
- Bachelors
- GSA ceiling, 25th–75th
- $100/hr – $150/hr
- GSA ceiling, median
- $122/hr
- Rough salary estimate
- $106k–$141k
- Most common education
- Bachelors
- GSA ceiling, 25th–75th
- $117/hr – $180/hr
- GSA ceiling, median
- $147/hr
- Rough salary estimate
- $127k–$170k
- Most common education
- Bachelors
- GSA ceiling, 25th–75th
- $159/hr – $233/hr
- GSA ceiling, median
- $186/hr
- Rough salary estimate
- $161k–$215k
- Most common education
- Bachelors
- GSA ceiling, 25th–75th
- $136/hr – $190/hr
- GSA ceiling, median
- $173/hr
- Rough salary estimate
- $150k–$200k
GSA ceiling rate: what the government pays the contractor, not your salary. It includes overhead, benefits, and profit. Source: GSA CALC+, current contract year, synced Oct 25, 2026, 456 rates.
Common certifications: CompTIA Security+, Certified Information Systems Security Professional (CISSP), Certified Ethical Hacker (CEH), Cisco Certified Network Associate (CCNA), GIAC Security Essentials (GSEC), Systems Security Certified Practitioner (SSCP), Security+, Network+
Clearance for this labor category
About 12% of Information Systems Security Officer GSA rates require a clearance. Put your clearance on the very first line of your resume, under your name and contact info. Level and status only. Never list program names, SCI caveats, or classified details. Use the free Clearance Formatter.
Military codes that map to Information Systems Security Officer
Sample Information Systems Security Officer resume bullets
Public-safe, quantified examples. Replace the numbers with your own.
- Maintained 100% system compliance for a portfolio of 15 federal information systems, ensuring continuous authorization for 500+ users.
- Led the remediation of over 200 high-risk security vulnerabilities, reducing system audit findings by 40% over a 12-month period.
- Managed a $2M security compliance budget for a large-scale enterprise network, streamlining documentation processes to reduce re-authorization time by 30%.
What level Information Systems Security Officer are you?
Enter your years, education, certifications, and clearance. Get your likely level, the GSA rate range for that level, and what would move you up.
With 0 years of relevant experience and a no degree, your effective experience is about 0 years. Under the common GSA CALC+ rule that a degree step substitutes for roughly 2 years, that maps to Level I. Verify against the specific contract.
Move up · To reach Level II, add about 4 more years of relevant experience, or earn a certification the contract requires (e.g. Security+, PMP) that the contract requires.
GSA ceiling rate: what the government pays the contractor, not your salary. It includes overhead, benefits, and profit. Source: GSA CALC+, current contract year, synced Oct 25, 2026, 131 rates.
No account needed. Opens the free translator prefilled with Information Systems Security Officer. Share link encodes only your selections, no names.
Information Systems Security Officer labor category: quick answers
How does my military experience translate to an ISSO role?
Experience in roles like Cyber Security Technician, Information Assurance, or Signals Intelligence often maps directly to ISSO functions due to your familiarity with operational security and standardized compliance reporting.
Is a security clearance required for this role?
While not all ISSO roles require a clearance, the vast majority of government contracting positions in this field do, typically ranging from Secret to Top Secret depending on the sensitivity of the data managed.
Do I need a degree to be an ISSO?
A Bachelor degree is common, but many government contracts allow for a combination of professional certifications, such as Security+ or CISSP, and years of relevant experience to substitute for formal education requirements.
What is the typical pay range for an ISSO?
Pay varies significantly based on the system complexity and clearance level, but industry data shows hourly rates typically range from $125 for entry-level positions to over $185 for senior-level technical experts.
How do I know which level of ISSO I qualify for?
Level I generally requires minimal direct experience and focuses on routine maintenance, while Level III and IV require years of demonstrated expertise in managing enterprise-level security programs and leading audit responses.
Reviewed by the Good to Go team · Last updated 2026-10-21 · Sources: GSA CALC+, O*NET
More about this roleShow
They are responsible for managing the authorization to operate process, documenting security controls, and ensuring that systems meet the rigorous requirements set forth by frameworks such as the Risk Management Framework. These professionals translate complex regulatory policies into actionable technical requirements for IT teams. In terms of career progression, entry-level ISSOs typically manage smaller, less complex systems with oversight from senior staff. As you gain experience, education, and professional certifications, you move into mid-level and senior roles where you might manage enterprise-wide system portfolios, lead audit responses, or oversee large-scale security architecture changes. For transitioning service members, this role is a natural transition from military cyber, communications, or intelligence operations roles that required maintaining operational security and compliance within strict regulatory environments.
Each contract defines its own labor categories and levels, so confirm the fit against the posting. Pay figures here are estimates from GSA CALC+ ceiling rates, not a guarantee.
Find your Information Systems Security Officer level
Enter your years, education, certifications, and clearance. Get your likely level and the GSA rate range for it.
Open the Level Calculator- CTN Cryptologic Technician Networks
- 3D0X2 Cyber Systems Operations
- 0681 Cyber Security Technician
- 25W Telecommunications Operations Chief
- 2210 IT Specialist
- IT Information Systems Technician
- 0080 Security Administration
- 1D7X1 Cyber System Operations
- 1B4X1 Cyber Warfare Operations
- 17C Cyber Operations Specialist
- 25D Cyber Network Defender