ISSO: Federal RMF Lead (On-Site)

Anakim Consulting Incorporated; Ashburn (VA); On-site; USD 120,000 - 160,000; Full time

Job summary

Anakim Consulting Incorporated in Ashburn, VA is seeking Information Systems Security Officers (ISSO) to support a large federal agency. These roles require managing security authorization activities and maintaining ATO packages, ensuring compliance throughout lifecycle.

You will work with RMF processes, NIST SP 800-53/800-37, and collaborate with System Owners and AOs to implement controls and document plans. Positions are 100% on-site in Ashburn.

Qualifications

• Experience with security authorization activities and RMF processes is preferred.
• Familiarity with NIST SP 800-53 and 800-37 standards is a plus.
• Ability to develop and maintain security documentation and artifacts.

Responsibilities

• Authorization and Compliance: Manage security authorization activities, maintain Authority to Operate (ATO) packages, and ensure full compliance with federal, defense, or enterprise security standards (e.g., NIST SP 800-53, NIST SP 800-37, FISMA, RMF).
• Documentation Management: Develop, review, and maintain core system security documentation, including System Security Plans (SSPs), Security Assessment Reports (SARs), Security Control Traceability Matrices (SCTM), and Contingency Plans.
• Vulnerability and POA&M Management: Track, manage, and remediate security findings and Plan of Action and Milestones (POA&M) items. Evaluate control deficiencies and recommend risk-mitigating solutions.
• Assessment Coordination: Coordinate independent security assessments, third-party audits, and continuous monitoring activities. Collaborate with stakeholders to resolve non-compliant findings.
• Technical Guidance: Serve as a subject matter expert on security policy interpretation, control implementation, and system authorization strategies.

Job description

Anakim Consulting Incorporated in Ashburn, VA is seeking Information Systems Security Officers (ISSO) to support a large federal agency. These roles require managing security authorization activities and maintaining ATO packages, ensuring compliance throughout lifecycle.

You will work with RMF processes, NIST SP 800-53/800-37, and collaborate with System Owners and AOs to implement controls and document plans. Positions are 100% on-site in Ashburn.