Federal ISSO — RMF & Compliance Lead

TestPros; Washington; On-site; USD 70,000 - 145,000; Full time

Job summary

TestPros is seeking an Information System Security Officer (ISSO) to support cybersecurity and RMF compliance for federal information systems. You'll liaise with system owners, cybersecurity teams, and government stakeholders to ensure secure postures throughout the system lifecycle.

The role involves RMF process support, documentation development (SSPs, SARs, POA&Ms, SCTMs), and coordinating ATO/IATO packages, audits, and vulnerability management with tools like Nessus, ACAS, Tenable, and

Qualifications

• Bachelor’s degree in Information Technology, Cybersecurity, Computer Science, or related field (or equivalent experience).
• 3+ years of experience supporting federal cybersecurity, RMF, or information assurance programs.
• Experience developing and maintaining RMF authorization packages.
• Working knowledge of NIST 800-53, NIST 800-37, FISMA, Security Control Assessments, Continuous Monitoring.

Responsibilities

• Support RMF processes implementation and maintenance.
• Develop, review, and maintain security documentation (SSPs, SARs, POA&Ms, SCTMs, ConMon).
• Conduct security control assessments and compliance reviews.
• Coordinate ATO/IATO and authorization package updates.
• Support vulnerability management activities and track findings with common tools.
• Monitor cybersecurity risks and recommend mitigations.
• Coordinate with admins, engineers, developers and security staff.
• Review system changes and participate in CCBs as required.
• Support audits, inspections, and cybersecurity assessments.
• Ensure compliance with NIST 800-53, FISMA and agency policies.

Skills

RMF

NIST 800-53

NIST 800-37

FISMA

Security Assessments

Continuous Monitoring

Vulnerability Scanning

Communication

Education

Bachelor’s degree in IT / Cybersecurity / CS

Tools

eMASS

XACTA

CSAM

Job description

TestPros is seeking an Information System Security Officer (ISSO) to support cybersecurity and RMF compliance for federal information systems. You'll liaise with system owners, cybersecurity teams, and government stakeholders to ensure secure postures throughout the system lifecycle.

The role involves RMF process support, documentation development (SSPs, SARs, POA&Ms, SCTMs), and coordinating ATO/IATO packages, audits, and vulnerability management with tools like Nessus, ACAS, Tenable, and