Federal ISSO: RMF & Cloud Security Lead

ASSYST, Inc.; Maryland City (MD); On-site; USD 100,000 - 140,000; Full time

Benefits offered by this job

Medical benefits

Dental benefits

401(k) retirement plan

Disability insurance

Flexible spending accounts

Job summary

ASSYST, Inc. is seeking an Information Systems Security Officer (ISSO) to support a Federal customer. The ISSO will help ensure the confidentiality, integrity, and availability of federal information systems while aligning with FISMA, FedRAMP, NIST, and related security standards.

The role focuses on RMF activities, system authorization, continuous monitoring, risk assessment, and guidance to system owners and leadership. A Bachelor's degree and active CISSP or CISM are required.

Qualifications

• Bachelor's degree or equivalent experience.
• 5+ years of Federal information security experience.
• Active CISSP or CISM certification.

Responsibilities

• Respond to cybersecurity incidents and security events to mitigate risks.
• Support RMF, system authorization, and continuous monitoring.
• Review and maintain SSPs, SAPs, SARs, Contingency Plans, POA&Ms, and other authorization artifacts.
• Assess security risks, analyze security assessment reports, and recommend mitigations.
• Support continuous monitoring, ongoing risk assessments, and compliance activities.
• Provide cybersecurity guidance to system owners and leadership based on NIST, FIPS, and Federal standards.
• Monitor changes to Federal cybersecurity policies, regulations, and directives.
• Support protection of PII and PIAs.
• Evaluate the security impact of new technologies and cloud environments.

Skills

Federal security

Cybersecurity

Risk management

RMF

NIST

Education

Bachelor's degree

Job description

ASSYST, Inc. is seeking an Information Systems Security Officer (ISSO) to support a Federal customer. The ISSO will help ensure the confidentiality, integrity, and availability of federal information systems while aligning with FISMA, FedRAMP, NIST, and related security standards.

The role focuses on RMF activities, system authorization, continuous monitoring, risk assessment, and guidance to system owners and leadership. A Bachelor's degree and active CISSP or CISM are required.