Cybersecurity SME / ISSO- Federal Health

rockITdata; Arlington (VA); On-site; USD 115,000 - 175,000; Full time

Job summary

rockITdata is seeking a Cybersecurity SME / ISSO in Arlington, VA to lead RMF compliance and security engineering for federal healthcare modernization initiatives. You will collaborate with engineering, cloud, and government teams to ensure secure, authorized systems throughout the SDLC.

The ideal candidate has 5+ years in cybersecurity/ISSO roles, strong RMF and NIST knowledge, and the ability to obtain a Level 3 Public Trust clearance. A background in healthcare IT is a plus.

Qualifications

• Bachelor's degree in Cybersecurity, Information Assurance, CS, or related field.
• 5 years of cybersecurity/ISSO experience in enterprise IT environments.
• Experience implementing RMF in federal environments.
• Experience developing ATO packages, SSPs, POA&Ms, and other federal docs.
• Knowledge of NIST SP 800-53, FISMA, FedRAMP, Zero Trust, and federal standards.
• Experience with secure cloud environments (AWS GovCloud, Azure Government) preferred.
• Certifications such as CISSP, CAP, Security+, CISM preferred.
• Experience with VA/VHA/DHA or federal healthcare programs preferred.
• Strong analytical, leadership, communication, and problem-solving skills.
• Ability to obtain and maintain a Level 3 Public Trust clearance.

Responsibilities

• Lead cybersecurity activities supporting enterprise healthcare modernization initiatives.
• Manage RMF activities throughout the system lifecycle.
• Develop, maintain, and coordinate ATO documentation and authorization packages.
• Prepare and maintain SSPs, SARs, POA&Ms, and other security documentation.
• Coordinate security control implementation, assessment, and continuous monitoring activities.
• Perform security risk assessments and mitigation strategies.
• Collaborate with engineering, cloud, infrastructure, and development teams to integrate cybersecurity.
• Support vulnerability management, remediation, security testing, and audit readiness.
• Monitor compliance with NIST, FISMA, VA, and other Federal requirements.
• Provide cybersecurity guidance to project leadership and Government stakeholders.

Skills

RMF knowledge

NIST SP 800-53

Federal cybersecurity standards

Leadership & communication

Public Trust clearance eligibility

Education

Bachelor's degree in Cybersecurity or related field

Tools

AWS GovCloud/Azure Gov

Security Certification (CISSP/CISM/Security+)

Job description

Driven by Innovation and built on Trust, rockITdata is a unique SDVOSB services company that partners with leading commercial healthcare/life sciences organizations on cutting edge innovations - think AI, automation and data transformation. We then bring those commercially tested solutions to government entities to deliver predictable, measurable impact for the American taxpayer and consumer.

Join rockITdata as a Cybersecurity SME / Information System Security Officer (ISSO) supporting one of the nation's largest federal healthcare modernization initiatives. In this role, you'll lead cybersecurity compliance, Risk Management Framework (RMF) activities, and security engineering efforts that protect mission-critical healthcare systems and sensitive government information. Working closely with engineering, cloud, infrastructure, testing, and Government security teams, you'll ensure enterprise applications remain secure, compliant, and fully authorized throughout the system development lifecycle.

This is an excellent opportunity for an experienced cybersecurity professional who enjoys solving complex security challenges, collaborating across multidisciplinary teams, and helping deliver secure healthcare technology solutions that directly improve services for our nation's Veterans.

Key Responsibilities

• Lead cybersecurity activities supporting enterprise healthcare modernization initiatives.
• Manage Risk Management Framework (RMF) activities throughout the system lifecycle.
• Develop, maintain, and coordinate Authority to Operate (ATO) documentation and authorization packages.
• Prepare and maintain System Security Plans (SSPs), Security Assessment Reports (SARs), Plan of Action & Milestones (POA&Ms), and other security documentation.
• Coordinate security control implementation, assessment, and continuous monitoring activities.
• Perform security risk assessments and recommend mitigation strategies that reduce organizational risk.
• Collaborate with engineering, cloud, infrastructure, and development teams to integrate cybersecurity throughout system design and implementation.
• Support vulnerability management, remediation activities, security testing, and audit readiness.
• Monitor compliance with NIST, FISMA, VA, and other Federal cybersecurity requirements.
• Provide cybersecurity guidance to project leadership and Government stakeholders while promoting security best practices across the program.

Required Qualifications

• Bachelor's degree in Cybersecurity, Information Assurance, Computer Science, Information Systems, or a related technical discipline.
• Five (5) years of experience supporting cybersecurity, information assurance, or Information System Security Officer (ISSO) responsibilities within enterprise IT environments.
• Experience implementing and maintaining the NIST Risk Management Framework (RMF).
• Experience developing and maintaining ATO packages, SSPs, POA&Ms, and other Federal cybersecurity documentation.
• Strong knowledge of NIST SP 800-53, FISMA, FedRAMP, Zero Trust principles, and Federal cybersecurity standards.
• Experience supporting AWS GovCloud, Azure Government, or other secure cloud environments is preferred.
• CISSP, CAP, Security+, CISM, or equivalent cybersecurity certification is preferred.
• Experience supporting VA, VHA, DHA, or other Federal healthcare organizations, health IT, telehealth, or Federal program management is preferred.
• Excellent analytical, leadership, communication, and problem-solving skills.
• Ability to obtain and maintain a Level 3 Public Trust clearance.

Here at rockITdata, we are committed to following our 10 Guiding Principles

Know the Why.

Value People Above All Else.

Transparency to a Fault.

Progress, Not Perfection.

Be Good by Doing Good.

Smart People Can Disagree.

Bend but Don’t Break.

Represent Your Brand.

Think Differently.

Be Amazing, Be Fearless, Smile, Have Fun!

Interested in joining something unique? Join us on our rockIT ship as we begin to blast off to the next chapter in our organization!

rockITdata is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to sex, race, color, religion, national origin, disability, protected Veteran status, age, or any other characteristic protected by law.

rockITdata wants all interested and qualified candidates to be able to use our career site to review and apply for employment opportunities. If you have a disability and need an accommodation to access the application process, please contact us for assistance at [e-mail].