Information System Security Officer (ISSO) — Evergreen

Ortman Consulting LLC; Washington, Northern (District of Columbia, KY); Hybrid; USD 120,000 - 180,000; Full time

Job summary

Ortman Consulting LLC maintains a standing bench of ISSO/ RMF professionals for recurring federal Assessment & Authorization work. This evergreen posting covers Senior and Lead levels, with contingent engagement until contracts are awarded. Qualified candidates are screened now for day-one readiness.

5+ years of cybersecurity experience with RMF/ATO, continuous monitoring, and PoAM tracking are required, along with US citizenship and Tier 4 Public Trust eligibility considerations.

Qualifications

• 5+ years of cybersecurity experience with hands-on RMF/ATO support (Lead: 8+ years, leading assessments).
• Continuous monitoring, vulnerability management, and POA&M tracking for FISMA-Moderate+ systems.
• Familiarity with a GRC/authorization platform (CSAM, Xacta, or eMASS) and NIST SP 800-53 / 800-37.
• U.S. citizen; able to obtain and maintain a Tier 4 High-Risk Public Trust (Secret/TS eligibility a plus).
• Preferred: Security+, CAP/CGRC, CISM, or CISSP (or CISSP-track).
• Prior ISSO/ISSM experience at a federal civilian or DoD agency.

Skills

RMF/ATO experience

Continuous monitoring

Vulnerability management

POA&M tracking

NIST SP 800-53/800-37

U.S. citizenship

Tools

CSAM

Xacta

eMASS

Job description

Information System Security Officer (ISSO) - Evergreen

Ortman Consulting maintains a standing bench of ISSO / RMF professionals for recurring federal Assessment & Authorization work (civilian and DoD). This is an evergreen posting - not tied to a single opening. We screen qualified candidates now and engage them through a contingent Letter of Intent, so when a supporting contract is awarded, a named ISSO is ready on day one. Levels: Senior (5+ yrs) and Lead (8+ yrs).

Requirements

Minimum Qualifications:

5+ years of cybersecurity experience with hands-on RMF/ATO support (Lead: 8+ years, leading assessments)

Continuous monitoring, vulnerability management, and POA&M tracking for FISMA-Moderate+ systems

Familiarity with a GRC/authorization platform (CSAM, Xacta, or eMASS) and NIST SP 800-53 / 800-37

U.S. citizen; able to obtain and maintain a Tier 4 High-Risk Public Trust (Secret/TS eligibility a plus)

Preferred:

Security+, CAP/CGRC, CISM, or CISSP (or CISSP-track)

Prior ISSO/ISSM experience at a federal civilian or DoD agency