Federal ISSO: Cybersecurity & RMF Assurance Lead

ELYON International; Washington (District of Columbia); Sur place; USD 120 000 - 180 000; Plein temps

Avantages offerts par ce poste

Paid sick leave

Medical/Dental (optional)

401 (k) Retirement Plan (optional)

Employer Paid Life Insurance

Employer Paid Short Term Disability

Optional Life Insurance

Résumé du poste

ELYON International in Washington, DC seeks an experienced Information System Security Officer (ISSO) to provide cybersecurity, risk management, and information assurance support for a federal healthcare technology program.

The ISSO will work with system owners, security leadership, developers, and program stakeholders to ensure security controls are implemented and RMF processes followed throughout the system lifecycle, including A&A/ATO activities and continuous monitoring.

Qualifications

• Bachelor's degree in Cybersecurity, IT, CS, IS, or related field.
• 5+ years of cybersecurity or information assurance experience, including experience supporting federal information systems.
• Hands-on ISSO, information assurance, or security compliance responsibilities.
• Strong understanding of RMF and NIST SP 800-53.
• Experience supporting A&A/ATO processes.
• Experience developing and maintaining SSPs, POA&Ms, risk assessments, and security documentation.
• Ability to meet federal background investigation requirements.

Responsabilités

• Serve as an ISSO for assigned federal information systems and applications.
• Support implementation and ongoing assessment of security controls per federal requirements.
• Support RMF throughout the system development and operational lifecycle.
• Develop, maintain, and review system security documentation and authorization artifacts.
• Support A&A and ATO processes.
• Maintain and update SSPs, POA&Ms, risk assessments, and related security documentation.
• Track vulnerabilities, findings, remediation activities, and corrective actions.
• Coordinate vulnerability scanning and remediation activities with system admins, developers, engineers, and security teams.
• Support continuous monitoring and ongoing security authorization activities.
• Evaluate proposed system changes to identify security impacts.
• Assist owners and technical teams in implementing and documenting controls.
• Support security audits, assessments, and control validation.
• Monitor compliance with cybersecurity policies and standards.
• Conduct or support risk assessments and mitigation recommendations.
• Coordinate with incident response and cybersecurity teams when events or vulnerabilities are identified.
• Develop security status reports, metrics, and briefings for leadership.
• Promote security best practices across engineering, development, cloud, and operations teams.

Connaissances

ISSO

RMF

NIST 800-53

Information Assurance

Security Documentation

Vulnerability Management

Formation

Bachelor's degree

Outils

GRC tools

Description du poste

ELYON International in Washington, DC seeks an experienced Information System Security Officer (ISSO) to provide cybersecurity, risk management, and information assurance support for a federal healthcare technology program.

The ISSO will work with system owners, security leadership, developers, and program stakeholders to ensure security controls are implemented and RMF processes followed throughout the system lifecycle, including A&A/ATO activities and continuous monitoring.