ISSO Portfolio Lead: Security, Strategy & Team Growth

Steampunk, Inc.; McLean (VA); Hybrid; USD 125,000 - 175,000; Full time

Job summary

Steampunk, Inc. is seeking an ISSO Portfolio Manager / Team Lead to guide a federal customer through risk management and security operations. You will mentor ISSOs, coordinate with system owners, and deliver high-quality security outcomes at speed across a dynamic portfolio.

The role requires strong leadership, familiarity with NIST RMF, FISMA, and federal requirements, plus experience with vulnerability management and agile delivery. Hybrid work with on-site days in the DC area is offered.

Qualifications

• Master's degree with 6+ years of relevant experience; OR Bachelor's with 8 years of relevant experience; OR No degree with 12 years of relevant experience.
• Active CISSP, CASP, CISA, CISM or GSLC certification is required to support the contract.
• Strong knowledge of NIST RMF, FISMA, and modern security practices.
• Prior experience as a supervisor or team lead, with demonstrated ability to manage, mentor, and develop staff.
• Experience with vulnerability management and reviewing systems against federal requirements.
• Excellent communication skills and the ability to simplify security for non-technical partners.

Responsibilities

• Lead, mentor, and develop a team of ISSOs to deliver high-quality security support.
• Serve as the primary point of coordination between ISSO teams and project/program managers to ensure security tasks are reflected accurately in project schedules and sprints.
• Build strong relationships with system owners and stakeholders and position security as a customer-oriented service.
• Manage competing priorities across multiple systems while ensuring clear communication and timely delivery.
• Operate effectively in Agile environments, using sprint-based planning to prioritize ISSO work
• Drive execution of ISSO-related project work across multiple systems, coordinating timelines, dependencies, and deliverables in partnership with program/project leads
• Maintain accurate security records and workflows in JIRA, ServiceNow, and other modern tools.
• Deliver technically accurate, polished, and timely security artifacts that meet program standards and enable “quality at speed.”
• Oversee security authorization packages, continuous monitoring deliverables, audit readiness, data calls, and risk reporting.
• Track vulnerabilities, guide remediation, and keep all systems “green” on the FISMA scorecard.
• Identify blockers, communicate risks, and provide actionable mitigation recommendations.
• Participate in SDLC/SLM activities and help teams integrate security early and effectively.
• Deliver executive-level reporting and presentations to senior leadership or stakeholders
• Train or facilitate sessions for moderate-sized groups (10–25+ people)
• Contribute to the development or refinement of processes, standard operating procedures (SOPs), and templates for recurring security artifacts.
• Assess workload trends across assigned systems and provide leadership with input on resource allocation, staffing needs, and hiring priorities.

Skills

Team leadership

Security operations

Stakeholder management

Agile / SDLC

Communication skills

Education

Master's degree

Bachelor's degree

No degree

CISSP

CASP

CISA

CISM

GSLC

Tools

JIRA

ServiceNow

Job description

Steampunk, Inc. is seeking an ISSO Portfolio Manager / Team Lead to guide a federal customer through risk management and security operations. You will mentor ISSOs, coordinate with system owners, and deliver high-quality security outcomes at speed across a dynamic portfolio.

The role requires strong leadership, familiarity with NIST RMF, FISMA, and federal requirements, plus experience with vulnerability management and agile delivery. Hybrid work with on-site days in the DC area is offered.