ISSO Portfolio Manager / Team Lead

UNAVAILABLE; McLean (VA); Hybrid; USD 140,000 - 190,000; Full time

Job summary

Steampunk is seeking an ISSO Portfolio Manager / Team Lead to support a federal customer. This role blends cybersecurity expertise with strong customer engagement, coaching, and leadership to guide a team of ISSOs and coordinate with system owners and stakeholders.

You will lead, mentor, and deliver high-quality security outcomes across multiple systems in an Agile environment, maintaining security artifacts and FISMA metrics. Hybrid work with on-site weekly collaboration in Washington, DC.

Qualifications

• Master's degree with 6+ years of relevant experience, or Bachelor's with 8+ years, or no degree with 12+ years.
• Active CISSP, CASP, CISA, CISM, or GSLC certification.
• Strong knowledge of NIST RMF, FISMA, and modern security practices.
• Experience as a supervisor or team lead, with mentoring and staff development.
• Experience with vulnerability management and federal requirements.
• Excellent communication and the ability to simplify security for non-technical partners.
• Experience cultivating teams and balancing quality, speed, and customer expectations.
• Public Trust clearance is required.

Responsibilities

• Lead, mentor, and develop a team of ISSOs to deliver high-quality security support.
• Serve as the primary coordination point between ISSO teams and project managers to align security tasks with schedules and sprints.
• Build strong relationships with system owners and stakeholders to position security as a customer-oriented service.
• Manage competing priorities across multiple systems with clear communication and timely delivery.
• Operate in Agile environments with sprint-based planning to prioritise ISSO work.
• Drive ISSO-related project work across multiple systems, coordinating timelines and deliverables.
• Maintain accurate security records and workflows in JIRA, ServiceNow, and other modern tools.
• Deliver technically accurate security artifacts that meet program standards and enable speed.
• Oversee security authorization packages, continuous monitoring deliverables, and risk reporting.
• Track vulnerabilities, guide remediation, and keep systems green on the FISMA scorecard.
• Identify blockers, communicate risks, and provide actionable mitigation recommendations.
• Participate in SDLC/SLM activities and integrate security early.
• Deliver executive-level reporting and presentations to senior leadership.
• Train or facilitate sessions for groups of 10–25+ people.
• Contribute to SOPs and templates for recurring security artifacts.
• Assess workload trends and advise on staffing and hiring priorities.

Skills

Team leadership

Mentoring

Customer engagement

Communication

Agile practices

Secure engineering

Staff development

Education

Master's degree

Bachelor's degree

No degree

Tools

JIRA

ServiceNow

Job description

Overview

Steampunk is seeking anISSO Portfolio Manager / Team Lead to support a federal customer. This role is perfect for someone who blends strong cybersecurity expertise with exceptional customer engagement, coaching, and leadership skills. You’ll guide a team of ISSOs, partner closely with system owners and stakeholders, and deliver high-quality security outcomes at speed across a dynamic portfolio.

Responsibilities

• Lead, mentor, and develop a team of ISSOs to deliver high-quality security support.
• Serve as the primary point of coordination between ISSO teams and project/program managers to ensure security tasks are reflected accurately in project schedules and sprints.
• Build strong relationships with system owners and stakeholders and position security as a customer-oriented service.
• Manage competing priorities across multiple systems while ensuring clear communication and timely delivery.
• Operate effectively in Agile environments, using sprint-based planning to prioritize ISSO work
• Drive execution of ISSO-related project work across multiple systems, coordinating timelines, dependencies, and deliverables in partnership with program/project leads
• Maintain accurate security records and workflows in JIRA, ServiceNow, and other modern tools.
• Deliver technically accurate, polished, and timely security artifacts that meet program standards and enable quality at speed.
• Oversee security authorization packages, continuous monitoring deliverables, audit readiness, data calls, and risk reporting.
• Track vulnerabilities, guide remediation, and keep all systems green on theFISMA scorecard.
• Identify blockers, communicate risks, and provide actionable mitigation recommendations.
• Participate in SDLC/SLM activities and help teams integrate security early and effectively.
• Deliver executive-level reporting and presentations to senior leadership or stakeholders
• Train or facilitate sessions for moderate-sized groups (10-25+ people)
• Contribute to the development or refinement of processes, standard operating procedures (SOPs), and templates for recurring security artifacts.
• Assess workload trends across assigned systems and provide leadership with input on resource allocation, staffing needs, and hiring priorities.

Qualifications

• Master's degree and 6 years of relevant experience; OR
  • Bachelor's degree and 8 years of relevant experience; OR
  • No degree and 12 years of relevant experience
• One of the following certifications which must be Active to support of the contract:CISSP, CASP, CISA, CISM, GSLC.
• Strong knowledge ofNIST RMF, FISMA, and modern security practices.
• Prior experience as a supervisor or team lead, with demonstrated ability to manage, mentor, and develop staff
• Experience with vulnerability management and reviewing systems against federal requirements.
• Excellent communication skills and the ability to simplify security for non-technical partners.
• Experience cultivating teams and balancing quality, speed, and customer expectations

• Public Trust required.

Work Environment

• This role ishybrid, with at leastone on-site day per week in Washington, DC to support strong client engagement and team collaboration.