ISSO Manager - RMF & Cyber Governance Lead

Deloitte France; Arlington (VA); On-site; USD 138,000 - 278,000; Full time

Job summary

Deloitte Government & Public Services (GPS) seeks an experienced ISSO to manage security authorizations for designated systems in a DoD/Federal context. You will maintain SSPs and lead RMF-based activities, collaborating with stakeholders to implement and monitor controls.

This role requires TS/SCI eligibility and onsite work in Washington, D.C. You will coordinate vulnerability assessments, drive remediation, and report risk and compliance status to leadership.

Qualifications

• Bachelor’s degree is required.
• Active Top Secret (SCI Eligibility) security clearance required.
• Must be able to work onsite, 5 Days a week, at the client site in Washington, D.C.
• 7+ years of experience as an ISSO for DoD or Federal government information systems.
• Experience with Security Assessment and Authorization (SA&A) and RMF.
• Experience with vulnerability scanning using Nessus and reviewing results.
• Experience developing and maintaining security policies and standards.
• Experience supporting governance processes and leveraging GRC tools such as JCAM/OpenRMF.

Responsibilities

• Serve as the ISSO for designated information systems and maintain SSPs.
• Lead ATO activities including control implementation and continuous monitoring.
• Coordinate vulnerability and compliance assessments and track remediation.
• Monitor security controls and system integrity for assessments.
• Coordinate security incident response and governance communications.

Skills

ISSO experience

NIST RMF

NIST SP 800-53

GRC tools JCAM

OpenRMF

Cloud & on-premises

Communication skills

Project leadership

Multi-tasking

Education

Bachelor’s degree

Tools

Nessus

JCAM

OpenRMF

Job description

Deloitte Government & Public Services (GPS) seeks an experienced ISSO to manage security authorizations for designated systems in a DoD/Federal context. You will maintain SSPs and lead RMF-based activities, collaborating with stakeholders to implement and monitor controls.

This role requires TS/SCI eligibility and onsite work in Washington, D.C. You will coordinate vulnerability assessments, drive remediation, and report risk and compliance status to leadership.