Federal Healthcare Cybersecurity ISSO & RMF Lead

rockITdata; Arlington (VA); On-site; USD 115,000 - 175,000; Full time

Job summary

rockITdata is seeking a Cybersecurity SME / ISSO in Arlington, VA to lead RMF compliance and security engineering for federal healthcare modernization initiatives. You will collaborate with engineering, cloud, and government teams to ensure secure, authorized systems throughout the SDLC.

The ideal candidate has 5+ years in cybersecurity/ISSO roles, strong RMF and NIST knowledge, and the ability to obtain a Level 3 Public Trust clearance. A background in healthcare IT is a plus.

Qualifications

• Bachelor's degree in Cybersecurity, Information Assurance, CS, or related field.
• 5 years of cybersecurity/ISSO experience in enterprise IT environments.
• Experience implementing RMF in federal environments.
• Experience developing ATO packages, SSPs, POA&Ms, and other federal docs.
• Knowledge of NIST SP 800-53, FISMA, FedRAMP, Zero Trust, and federal standards.
• Experience with secure cloud environments (AWS GovCloud, Azure Government) preferred.
• Certifications such as CISSP, CAP, Security+, CISM preferred.
• Experience with VA/VHA/DHA or federal healthcare programs preferred.
• Strong analytical, leadership, communication, and problem-solving skills.
• Ability to obtain and maintain a Level 3 Public Trust clearance.

Responsibilities

• Lead cybersecurity activities supporting enterprise healthcare modernization initiatives.
• Manage RMF activities throughout the system lifecycle.
• Develop, maintain, and coordinate ATO documentation and authorization packages.
• Prepare and maintain SSPs, SARs, POA&Ms, and other security documentation.
• Coordinate security control implementation, assessment, and continuous monitoring activities.
• Perform security risk assessments and mitigation strategies.
• Collaborate with engineering, cloud, infrastructure, and development teams to integrate cybersecurity.
• Support vulnerability management, remediation, security testing, and audit readiness.
• Monitor compliance with NIST, FISMA, VA, and other Federal requirements.
• Provide cybersecurity guidance to project leadership and Government stakeholders.

Skills

RMF knowledge

NIST SP 800-53

Federal cybersecurity standards

Leadership & communication

Public Trust clearance eligibility

Education

Bachelor's degree in Cybersecurity or related field

Tools

AWS GovCloud/Azure Gov

Security Certification (CISSP/CISM/Security+)

Job description

rockITdata is seeking a Cybersecurity SME / ISSO in Arlington, VA to lead RMF compliance and security engineering for federal healthcare modernization initiatives. You will collaborate with engineering, cloud, and government teams to ensure secure, authorized systems throughout the SDLC.

The ideal candidate has 5+ years in cybersecurity/ISSO roles, strong RMF and NIST knowledge, and the ability to obtain a Level 3 Public Trust clearance. A background in healthcare IT is a plus.