Info System Security Officer - RMF/ATO Compliance Expert

RPMGlobal; Norfolk (VA); Hybrid; USD 110,000 - 190,000; Full time

Job summary

Base-2 Solutions in the United States seeks an Information System Security Officer to ensure security compliance, manage RMF processes, and maintain Authority to Operate across applications and systems in a security-focused environment.

The role requires updating SSPs, SCTMs, STPs, and POAMs in Xacta, loading STIGs/ACAS artifacts, and supporting assessments with PAT, ISSMs, and SCAs. Active TS/SCI with CI Polygraph is required.

Qualifications

• Bachelor's degree in computer science, software engineering, or a field applicable to the position required.
• 9 or more years of relevant experience required with a Bachelor's degree.
• Demonstrated experience in developing, implementing, and enforcing security policies, standards, and procedures to ensure regulatory compliance and protect organizational information assets.
• Proven track record in conducting risk assessments and identifying vulnerabilities in systems, networks, and applications.
• Experience in developing and overseeing implementation of mitigation strategies to reduce security risks.
• Strong background in monitoring systems and networks for security breaches and suspicious activity.
• Successful history of responding to security incidents, investigating root causes, and implementing corrective actions.

Responsibilities

• Work with application leads, system administrators, database administrators, developers, and testers to ensure systems are security compliant and achieve or maintain ATO.
• Follow the RMF process for full test, partial test, CONMON, and no test.
• Update Xacta documentation including SSPs, SCTM, STPs, and POAMs.
• Load artifacts such as STIG checklists and ACAS scans.
• Help implement STIG checklists and mitigate scan findings.
• Answer questions to ensure systems are developed with security compliance built in.
• Support security assessment events and respond to all questions from PAT team, ISSMs, and SCAs.

Skills

RMF process

Risk assessments

Security incident response

Vulnerability mitigation

Policy enforcement

Education

Bachelor's degree + 9+ years

Associates + 11 years

Master's + 7 years

PhD + 5 years

Tools

Xacta

ACAS

STIG checklists

Job description

Base-2 Solutions in the United States seeks an Information System Security Officer to ensure security compliance, manage RMF processes, and maintain Authority to Operate across applications and systems in a security-focused environment.

The role requires updating SSPs, SCTMs, STPs, and POAMs in Xacta, loading STIGs/ACAS artifacts, and supporting assessments with PAT, ISSMs, and SCAs. Active TS/SCI with CI Polygraph is required.