ISSM Lead – RMF, ATO & Security Governance

Venesco, LLC; Aberdeen, Northern (MD, KY); Hybrid; USD 110,000 - 160,000; Full time

Job summary

Venesco, LLC is seeking an Information System Security Manager (ISSM) to onsite in Maryland. You will lead RMF execution, manage ATO activities, and mentor ISSOs, ensuring audit-ready documentation across programs.

Responsibilities include vulnerability management, risk assessments, POA&M tracking, and enforcing security policies in line with NIST and DoD guidance. Strong leadership and communication are essential for briefings and cross-team coordination.

Qualifications

• Bachelor's degree in cybersecurity, information technology, computer science, engineering, or related field.
• 5+ years of cybersecurity or information assurance experience.
• Active Secret clearance or higher is strongly preferred.
• Strong knowledge of NIST RMF, NIST SP 800-53, and ATO lifecycle activities.
• Experience leading security governance, compliance, and risk management efforts.
• Experience supervising ISSOs or coordinating security activities across multiple teams.

Responsibilities

• Lead and oversee RMF execution across assigned systems, programs, or enclaves.
• Direct Authority to Operate (ATO) activities and ensure documentation is complete and audit-ready.
• Manage, coach, and mentor ISSOs and security staff.
• Oversee vulnerability management, risk assessments, POA&M tracking, and remediation prioritization.
• Develop, implement, and enforce security policies, procedures, and training requirements.
• Coordinate with officials, system owners, CISO staff, engineers, and program leadership to assess risk posture.
• Ensure compliance with security frameworks and DoD guidance.

Skills

RMF execution

ATO activities

Leadership

NIST SP 800-53

Clearance

Education

Bachelor’s degree in Cybersecurity

Tools

Security governance tools

Job description

Venesco, LLC is seeking an Information System Security Manager (ISSM) to onsite in Maryland. You will lead RMF execution, manage ATO activities, and mentor ISSOs, ensuring audit-ready documentation across programs.

Responsibilities include vulnerability management, risk assessments, POA&M tracking, and enforcing security policies in line with NIST and DoD guidance. Strong leadership and communication are essential for briefings and cross-team coordination.