Federal ISSM: RMF & Incident Response Leader

Cathexisfederal; Tysons, Northern (VA, KY); Hybrid; USD 150,000 - 195,000; Full time

Benefits offered by this job

Performance Bonuses

Medical Insurance

Dental Insurance

Vision Insurance

401(k) Plan (Traditional and ROTH)

Life Insurance (Basic, Voluntary & AD&

Paid Time Off

11 Federal Holidays

Parental Leave

Commuter Benefits

Short Term & Long Term Disability

Training & Development

Wellness Program

Community Outreach Initiatives

Job summary

Cathexisfederal is seeking an Information System Security Manager (ISSM) to serve as the principal advisor on security for assigned information systems. You will lead RMF-based assessments and authorizations, develop key RMF artifacts, and manage a team of ISSOs, ensuring continuous monitoring and incident response in coordination with AO and program leadership.

The role requires active DoD 8570-M/DoD 8140 IAM Level II certification, a bachelor’s degree in a related field, and experience in

Qualifications

• Active DoD 8570.01-M / DoD 8140 IAM Level II certification (e.g., CAP, CASP+ CE, CISM, GSLC) at time of hire
• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field, or equivalent professional experience
• Demonstrated experience serving as an ISSM, ISSO, or equivalent security role within RMF or legacy DIACAP/C&A process

Responsibilities

• Serve as the principal advisor to the AO and Information System Owner on the security of information systems
• Lead and manage the A&A process for information systems per RMF and NIST guidance to ensure timely ATOs
• Develop, review, and maintain SSPs, POA&Ms, SARs, and other RMF artifacts
• Oversee ISSOs and guide day-to-day security operations and compliance activities
• Conduct and oversee continuous monitoring activities to maintain security posture
• Coordinate incident response activities and report security incidents to agency leadership
• Manage risk assessments and communicate residual risk to AO with mitigation recommendations
• Ensure personnel meet DoD IA workforce certification requirements
• Maintain security documentation in GRC/eMASS systems and support audits

Skills

Communication skills

Security program management

RMF knowledge

Security incident response

Education

Bachelor's degree in Cybersecurity or related field

Tools

eMASS

Xacta

GRC platforms

Job description

Cathexisfederal is seeking an Information System Security Manager (ISSM) to serve as the principal advisor on security for assigned information systems. You will lead RMF-based assessments and authorizations, develop key RMF artifacts, and manage a team of ISSOs, ensuring continuous monitoring and incident response in coordination with AO and program leadership.

The role requires active DoD 8570-M/DoD 8140 IAM Level II certification, a bachelor’s degree in a related field, and experience in