Information Security Manager — RMF/DoD

Pueo Business Solutions LLC; McLean (VA); On-site; USD 120,000 - 170,000; Full time

Job summary

Pueo Business Solutions LLC in McLean, VA seeks an ISSM to ensure the security and maintenance of information systems across RMF lifecycles in line with ICD and DIA policies. You will manage changes, assess cybersecurity impact, and guide continuous monitoring.

Ideal candidates bring senior RMF expertise, strong collaboration with ISSOs and PMs, and hands-on use of risk management platforms to drive remediation and compliance across DoD programs.

Qualifications

• Experience managing RMF and DoD security controls across full lifecycle.
• Proven ability to document vulnerabilities and drive remediation.
• Strong familiarity with DoD IC directives and DIA policies.

Responsibilities

• Document misconfigurations, issues, and vulnerabilities from analyzed systems.
• Use XACTA to manage risk assessments, POA&M tracking, and compliance status.
• Monitor POA&M items and ensure vulnerabilities are mitigated and closed.
• Collaborate with ISSOs, SCAs, PMs, and stakeholders for guidance.
• Act as a cyber security representative of the DoD.
• Lead security projects and initiatives across mixed teams.

Skills

RMF & NIST 800-series

Vulnerability management

POA&M tracking

Cyber risk assessment

Stakeholder collaboration

Continuous monitoring

Security governance

Education

IAT-III Certification

CASP+ CE

CCNP Security

CISA

CISSP (or Associate)

GCED

GCIH

CCSP

Bachelor’s Degree + 12 yrs exp

Tools

XACTA

EMASS

STIGS

ACAS

PRISMA

Splunk

Trellix HBSS

Job description

Pueo Business Solutions LLC in McLean, VA seeks an ISSM to ensure the security and maintenance of information systems across RMF lifecycles in line with ICD and DIA policies. You will manage changes, assess cybersecurity impact, and guide continuous monitoring.

Ideal candidates bring senior RMF expertise, strong collaboration with ISSOs and PMs, and hands-on use of risk management platforms to drive remediation and compliance across DoD programs.