Federal ISSO: RMF/NIST Cybersecurity & Compliance

8 Consulting LLC; Washington (District of Columbia); Hybrid; USD 110,000 - 170,000; Full time

Job summary

8 Consulting LLC in Washington, DC, seeks an Information Systems Security Officer (ISSO) to support federal cybersecurity activities in a hybrid environment. The role covers security authorization, ongoing monitoring, and collaboration with government stakeholders and technical teams.

Required experience includes NIST RMF, security control assessment, POA&M documentation, and continuous monitoring. The candidate will assist with audits, risk analysis, and governance activities in a federal

Qualifications

• Experience in federal cybersecurity, information assurance, or information system security functions.

Responsibilities

• Support the NIST RMF lifecycle for federal information systems.
• Develop, review, and maintain SSPs, POA&M, assessment documentation, and control evidence.
• Support initial authorizations, reauthorizations, annual assessments, and ongoing authorization activities.
• Review security control implementation and supporting evidence.
• Perform Continuous Monitoring and security posture reporting.
• Track vulnerability findings and remediation through closure.
• Maintain POA&M records and support risk analysis and remediation tracking.
• Assist with cybersecurity audits, assessments, inspections, and compliance reviews.
• Coordinate with system owners, administrators, engineers, cybersecurity personnel, and assessors.
• Maintain audit-ready security documentation.
• Support incident response coordination and related cybersecurity documentation.
• Participate in cybersecurity governance meetings with status, risk, and technical updates.

Skills

NIST RMF

NIST SP 800-53

Security documentation

Written and verbal communication

Stakeholder management

U.S. Citizenship

Tools

GRC tools

SIEM

ServiceNow

Splunk

Tenable

Qualys

Microsoft Defender

Azure

Microsoft 365

Intune

Job description

8 Consulting LLC in Washington, DC, seeks an Information Systems Security Officer (ISSO) to support federal cybersecurity activities in a hybrid environment. The role covers security authorization, ongoing monitoring, and collaboration with government stakeholders and technical teams.

Required experience includes NIST RMF, security control assessment, POA&M documentation, and continuous monitoring. The candidate will assist with audits, risk analysis, and governance activities in a federal