ISSO: DoD RMF & Compliance Lead

starfish; Patuxent Highland (MD); On-site; USD 80,000 - 130,000; Full time

Benefits offered by this job

ESOP participation

401(k) match

Health benefits

Job summary

Torch Technologies is seeking an Information System Security Officer to support cyber security operations for the DoW in Lexington Park, MD. The role focuses on RMF, NIST 800-53 controls, eMASS artifact preparation, and continuous monitoring within a DoD environment.

The position requires US citizenship, a DoW Secret clearance, and hands-on experience with ATO packages, POA&M management, and vulnerability assessments. Onsite work in Lexington Park, MD with 10% travel is expected.

Qualifications

• U.S. citizenship required.
• Bachelor's degree in Information Technology, Cybersecurity, or a related field, or equivalent professional experience.
• 2+ years of experience in an ISSO/ISSM or compliance-focused cybersecurity role within DoD or federal environments.
• Active DoW Secret security clearance required.
• Working knowledge of RMF and NIST 800-53 security controls.
• Hands-on experience preparing and submitting artifacts in eMASS.
• Demonstrated experience managing POA&M, including tracking, coordinating remediation, and documenting closure of findings.
• Familiarity with vulnerability and compliance scanning tools (ACAS/Nessus, SCAP) and interpreting results against control requirements.
• DoD 8570/8140-compliant certification at IAM/IAT Level II or higher (e.g., Security+, CAP, CySA+).

Responsibilities

• Collect, prepare, and submit artifacts supporting eMASS ATO packages (SSPs, SCTMs, evidence).
• Verify configurations against NIST 800-53 requirements; identify gaps.
• Manage POA&M for assigned systems; coordinate remediation and close items with evidence.
• Coordinate with ISSEs, system admins, and engineering teams to gather evidence.
• Support continuous monitoring, including control reviews and vulnerability analysis.
• Track authorization expiration dates and lead re-authorization efforts.
• Maintain audit-ready eMASS documentation for systems and audits.
• Review vulnerability results (ACAS/Nessus, SCAP) and map to controls/POA&M.
• Support incident reporting per DoD/program policies; communicate risk posture to management.

Skills

RMF

NIST 800-53

eMASS

POA&M

ACAS/Nessus

SCAP

IAM/IAT Level II+

Education

Bachelor's degree in IT/Cybersecurity or related field

Tools

ACAS

Nessus

SCAP

Job description

Torch Technologies is seeking an Information System Security Officer to support cyber security operations for the DoW in Lexington Park, MD. The role focuses on RMF, NIST 800-53 controls, eMASS artifact preparation, and continuous monitoring within a DoD environment.

The position requires US citizenship, a DoW Secret clearance, and hands-on experience with ATO packages, POA&M management, and vulnerability assessments. Onsite work in Lexington Park, MD with 10% travel is expected.