ISSO/ISCM Lead — RMF & A&A Program Lead

Ampcus, Inc; Washington (District of Columbia); On-site; USD 100,000 - 130,000; Full time

Job summary

Ampcus, Inc is seeking an ISSO/ISCM Lead in Washington, DC, responsible for overseeing the Information Security Continuous Monitoring (ISCM) program. The role involves strategic coordination of compliance, risk management, and documentation oversight. Candidates should have a CISSP or equivalent certification. Key responsibilities include leading internal security assessments, managing the end-to-end lifecycle of security processes, and acting as the primary liaison with the Office of the CISO. This position plays a critical role in maintaining security standards and ensuring effective risk management in line with operational requirements.

Qualifications

• Experience leading compliance and authorization support.
• Proficient in Risk Management Framework (RMF) and A&A lifecycle.
• Ability to coordinate security controls testing and Security Control Assessments (SCA).

Responsibilities

• Lead the execution of the Information Security Continuous Monitoring (ISCM) program.
• Facilitate internal controls testing and manage POA&M lifecycle.
• Coordinate weekly security meetings between business functions and the Office of the CISO.

Skills

CISSP or equivalent information security governance/risk certification

Job description

Ampcus, Inc is seeking an ISSO/ISCM Lead in Washington, DC, responsible for overseeing the Information Security Continuous Monitoring (ISCM) program. The role involves strategic coordination of compliance, risk management, and documentation oversight. Candidates should have a CISSP or equivalent certification. Key responsibilities include leading internal security assessments, managing the end-to-end lifecycle of security processes, and acting as the primary liaison with the Office of the CISO. This position plays a critical role in maintaining security standards and ensuring effective risk management in line with operational requirements.