ISSO: Lead RMF/ATO Security Expert (TS/SCI)

IBM; Boston (MA); On-site; USD 116,000 - 216,000; Full time

Job summary

IBM Consulting is seeking an Information System Security Officer (ISSO) to oversee RMF ATO planning, execution, and continuous monitoring for critical systems. You’ll partner with software and system architects to ensure security controls align with DoD/IC requirements.

In this role, you will lead risk management activities, coordinate across cross-functional teams, and develop security documentation to sustain authorization.

Qualifications

• Must have lead experience for RMF ATO processes and security controls.
• Self-starter capable of leading high-priority tasks independently.
• Strong written and verbal communication, project management, and problem-solving skills.
• Deep knowledge of NIST RMF, NIST SP 800-53 Rev. 5, and DoD/IC authorization processes.
• Security+ certification is required.
• Experience with risk management, security control implementation, vulnerability management, continuous monitoring, and POA&M management.
• Must hold a TS/SCI CI Poly security clearance on day 1.

Responsibilities

• Plan, execute, and maintain RMF ATO activities to achieve and sustain an ATO.
• Serve as the primary security lead for system security posture and collaborate with architects to ensure controls meet requirements.
• Coordinate across cross-functional teams to develop security documentation and perform assessment activities.
• Oversee risk management and continuous monitoring to ensure compliance of security controls.

Skills

RMF/ATO process

Security+ certification

Technical writing

Communication

Project management

Problem solving

Independent work

Education

Bachelor's Degree

Bachelor's Degree

Job description

IBM Consulting is seeking an Information System Security Officer (ISSO) to oversee RMF ATO planning, execution, and continuous monitoring for critical systems. You’ll partner with software and system architects to ensure security controls align with DoD/IC requirements.

In this role, you will lead risk management activities, coordinate across cross-functional teams, and develop security documentation to sustain authorization.