ISSO: Cloud Security & RMF/JSIG Compliance Lead

Accenture-Federal-Services-2; Huntsville (AL); On-site; USD 103,000 - 196,000; Full time

Job summary

Accenture Federal Services is seeking an Information System Security Officer (ISSO) to oversee security, compliance, and risk management for cloud-based systems. You will support RMF/JSIG accreditation, maintain continuous monitoring, and collaborate with security engineering, DevOps, and IT ops teams to keep systems compliant as they evolve.

You will own continuous monitoring, RMF documentation, vulnerability remediation, and incident response actions.

Qualifications

• 3+ years of ISSO or equivalent security role — implementing controls under RMF, JSIG, or ICD 503.
• DoD 8570 IAT Level II certification (Security+ or equivalent).
• Bachelor’s degree in CS/IS/Engineering or 4+ years of relevant job or military experience in lieu of degree.

Responsibilities

• Perform continuous monitoring, vulnerability assessment, and risk analysis with POA&M updates.
• Prepare RMF/JSIG documentation packages (SSP, SAP, SAR, POA&M) and monitoring artifacts.
• Implement security controls and ensure STIG/CIS benchmark compliance.
• Coordinate with admins, security engineers, and DevOps on changes affecting security posture, including Zero Trust.
• Lead incident handling and track remediation of security findings.

Skills

RMF/JSIG/ICD 503

Vulnerability management

DoD 8570 IAT Level II certification

Cloud environments (AWS/Azure)

Education

Bachelor's degree in Computer Science / Information Systems / Engineering

4+ years of relevant experience in lieu of degree

Tools

Nessus/ACAS

Splunk

Job description

Accenture Federal Services is seeking an Information System Security Officer (ISSO) to oversee security, compliance, and risk management for cloud-based systems. You will support RMF/JSIG accreditation, maintain continuous monitoring, and collaborate with security engineering, DevOps, and IT ops teams to keep systems compliant as they evolve.

You will own continuous monitoring, RMF documentation, vulnerability remediation, and incident response actions.