Information System Security Officer (ISSO) TS/SCI CI Poly

IBM; Chantilly (VA); On-site; USD 120,000 - 170,000; Full time

Job summary

IBM Consulting seeks an ISSO to lead planning, execution, and maintenance of RMF accreditation to achieve and sustain an Authority to Operate (ATO).

You will collaborate with software and system architects to ensure security controls are designed and implemented across the system, coordinating across teams to develop documentation and assessments, and driving continuous monitoring to meet DoD/IC requirements.

Qualifications

• Demonstrated experience leading one or more systems through RMF ATO processes.
• Must be a self-starter comfortable with high-priority tasks.
• Strong written and verbal communication, project management and problem-solving skills.
• Must possess strong knowledge of NIST RMF, NIST SP 800-53 Rev. 5, DoD & IC authorization processes.
• Must possess Security+ certification.
• Must have experience with risk management, security control implementation, vulnerability management, continuous monitoring, and POA&M management.
• Must possess a TS/SCI CI Poly security clearance on day 1.

Responsibilities

• Plan, execute, and maintain system accreditation and authorization activities to achieve and sustain ATO per RMF, DoD, IC requirements.
• Serve as primary security lead coordinating with architects to ensure designs meet controls and compliance.
• Develop and manage security documentation; perform assessment activities and cross-functional coordination.
• Oversee risk management, continuous monitoring, and ensure controls meet security and regulatory requirements.
• Collaborate on cross-functional security initiatives to maintain readiness and audit readiness.

Skills

RMF expertise

Self-starter

Technical writing

Communication

Project management

Problem-solving

Education

Bachelor's Degree

Tools

3PAO

FedRAMP

NIST SP 800-53 Rev.5

Job description

Introduction

A career in IBM Consulting is built on long-term client relationships and close collaboration worldwide. You'll work with leading companies across industries, helping them shape their hybrid cloud and AI journeys. With support from our strategic partners, robust IBM technology, and Red Hat, you'll have the tools to drive meaningful change and accelerate client impact. At IBM Consulting, curiosity fuels success. You'll be encouraged to challenge the norm, explore new ideas, and create innovative solutions that deliver real results. Our culture of growth and empathy focuses on your long-term career development while valuing your unique skills and experiences.

Introduction

A career in IBM Consulting is built on long-term client relationships and close collaboration worldwide. You'll work with leading companies across industries, helping them shape their hybrid cloud and AI journeys. With support from our strategic partners, robust IBM technology, and Red Hat, you'll have the tools to drive meaningful change and accelerate client impact. At IBM Consulting, curiosity fuels success. You'll be encouraged to challenge the norm, explore new ideas, and create innovative solutions that deliver real results. Our culture of growth and empathy focuses on your long-term career development while valuing your unique skills and experiences.

Your Role And Responsibilities

As the ISSO, you will complete the planning, execution, and maintenance of system accreditation and authorization activities to achieve and sustain an Authority to Operate (ATO) in accordance with NIST RMF, DoD, IC and agency specific requirements.

Serve as the primary security lead, responsible for activities for the security posture of the system to include working with the software and system architects to ensure the design meets security controls. Responsible for coordinating across cross-functional teams to develop and manage security documentation and perform assessment activities. Oversee risk management and continuous monitoring and ensuring implemented security controls meet compliance requirements.

Preferred Education

Bachelor's Degree

Required Technical And Professional Expertise

• Demonstrated experience leading one or more systems through the entire Risk Management Framework (RMF) Authorization to Operate (ATO) process.
• Must be a self-starter comfortable with leading and executing a high-priority, high-visibiilty task
• Requires the ability to work independently, possess strong technical writing, communication, project management and problem-solving skills to successfully deliver authorization objectives
• Must possess strong knowledge of NIST RMF, NIST SP 800-53 Rev. 5, DoD & IC authorization processes
• Must possess Security+ certification
• Must have experience with risk management, security control implementation, vulnerability management, continuous monitoring, and POA&M management
• Must possess a TS/SCI CI Poly security clearance on day 1

Preferred Technical And Professional Experience

• Experience with National Reconnaissance Office (NRO) accreditation and authorization processes and procedures
• 2+ years of experience supporting DoD IL4/IL5/IL6/IL7, or IC (ICD 503) authorization efforts.
• 2+ years of experience supporting cloud environments (e.g., AWS GovCloud, Azure Government) and cloud security principles.
• 2+ years of experience supporting independent security assessments (e.g., 3PAO, FedRAMP, DoD, or internal assessments).
• 2+ years of experience leading cross-functional security initiatives, with CISSP and/or PMP certifications highly desirable