Information Systems Security Officer

GovCIO; Columbus (OH); A distancia; USD 120.000 - 170.000; Jornada completa

Descripción de la vacante

GovCIO is seeking a Senior Information Systems Security Officer (ISSO) to lead RMF activities and sustain security across complex environments. You will drive A&A efforts from categorization to continuous monitoring, including emerging technologies such as AI/ML platforms, under NIST SP 800-53 Rev 5 and CNSSI 1253.

You will mentor junior ISSO staff, produce SSPs, SARs, SAPs, POA&Ms, and ensure compliance with policy.

Formación

• Experience leading RMF across multiple systems.
• Ability to authorize emerging tech including AI/ML platforms.
• Strong knowledge of FIPS 199, NIST SP 800-53 Rev 5 and CNSSI 1253.

Responsabilidades

• Support and execute all RMF lifecycle phases across systems and environments.
• Develop and maintain SSPs, SARs, SAPs, POA&Ms and security plans.
• Conduct concurrent RMF assessments and maintain compliance in JCAM.
• Assess AI/ML platforms and adapt baselines as needed.
• Manage evidence collection, traceability, and BOE packages.
• Determine system impact levels and perform PIAs/PTAs.
• Review vulnerabilities in Tenable, track POA&M remediation to closure.
• Provide security reporting and metrics to owners and stakeholders.
• Ensure compliance with FISMA, NIST 800-53 Rev 5, CNSSI 1253 and policy.
• Oversee workflow in JIRA and maintain visibility across pipelines.
• Mentor junior ISSO staff and develop SOPs and process docs.

Conocimientos

RMF lifecycle

A&A processes

NIST SP 800-53 Rev 5

CNSSI 1253

Tenable Security Center

JIRA

Mentoring

Policy compliance

Herramientas

Tenable Security Center

JCAM

Descripción del empleo

United States

Suitability/Public Trust

Fully remote

Information Technology

Overview

GovCIO is currently hiring for a Senior Information Systems Security Officer (ISSO) to support our client's contract needs. The Senior ISSO conducts Assessment and Authorization (A&A) activities with responsibility for the full RMF lifecycle from initial categorization through continuous monitoring. This role requires demonstrated expertise managing complex, concurrent assessments - including emerging technology systems such as AI/ML platforms - operating under NIST SP 800-53 Rev 5, CNSSI 1253, and applicable policies. The Senior ISSO provides mentorship to junior ISSO staff.

This position is based in Washington, DC and is eligible for 100% remote work.

Responsibilities

• Support and execute all phases of the NIST SP 800-37 RMF lifecycle including categorization, control selection, implementation, assessment, authorization, and continuous monitoring across multiple concurrent systems and network environments

• Develop, maintain, and update RMF documentation including System Security Plans (SSPs), Security Assessment Reports (SARs), Security Assessment Plans (SAPs), POA&Ms, Contingency Plans, Incident Response Plans, Risk Assessment documentation, and interconnection agreements

• Conduct multiple concurrent RMF assessments simultaneously, maintaining compliance documentation in JCAM

• Assess and authorize emerging technology systems - including AI/ML platforms - adapting NIST SP 800-53 Rev 5 control baselines to novel system types where standard guidance requires augmentation

• Manage evidence collection, control traceability documentation, and Body of Evidence (BOE) packages for assessments, audits, and compliance reviews

• Establish system impact levels following FIPS 199 for confidentiality, integrity, and availability; conduct and document Privacy Impact Assessments (PIAs) and Privacy Threshold Analyses (PTAs)

• Review and analyze vulnerability results using Tenable Security Center; create, track, and manage POA&M remediation activities through closure; validate scan completeness before Security Control Assessor review

• Provide security reporting, dashboards, and status updates to system owners and stakeholders; support development and maintenance of security metrics and scorecard reporting

• Ensure systems comply with FISMA, NIST SP 800-53 Rev 5, CNSSI 1253, OMB A-130, and applicable client cybersecurity policies

• Manage assessment workflow and task tracking using JIRA; maintain accurate status visibility across multiple concurrent assessment pipelines

• Mentor junior ISSO staff; develop SOPs, work instructions, and process documentation to improve team