ISSO: RMF/A&A Risk Leader (Hybrid DC)

TDI (Tetrad Digital Integrity); Washington (District of Columbia); Hybrid; USD 110,000 - 135,000; Full time

Benefits offered by this job

Hybrid work arrangement

Job summary

Tetrad Digital Integrity (TDI) is seeking an Information Systems Security Officer to align RMF processes and mature risk management for high-consequence environments.

This hybrid DC-area role requires CISSP/CISM/CRISC and 5+ years of RMF/A&A experience; you will lead A&A, SSPs, SIAs, POA&Ms, and continuous monitoring.

Travel is limited; you will collaborate with SO, ISSM, CISO and engineering teams to strengthen security posture.

Qualifications

• 5+ years of experience performing security assessments and RMF/A&A documentation.
• Experience creating System Security Plans (SSPs), SIAs, POA&Ms and other RMF artifacts.
• Familiarity with NIST RMF, NIST SPs and security authorization processes.
• Experience with Archer or similar GRC tools to support A&A activities.

Responsibilities

• Serve as cybersecurity advisor to System Owner, ISSM, and CISO on security matters.
• Lead RMF Security Assessment and Authorization to achieve and maintain ATO.
• Develop and maintain RMF documentation (SSPs, SIAs, POA&Ms, etc.).
• Perform continuous monitoring and review security controls and logs.
• Assess impact of system changes and communicate risks to stakeholders.
• Identify and coordinate remediation for control deficiencies and POA&M updates.
• Collaborate with engineering and system owners to strengthen security posture.
• Support internal/external security assessments and audits.

Skills

RMF experience

A&A documentation

Security assessment

GRC tools Archer

Education

Bachelor's degree in CS/IT/Cybersecurity

CISSP

Tools

Archer

Job description

Tetrad Digital Integrity (TDI) is seeking an Information Systems Security Officer to align RMF processes and mature risk management for high-consequence environments.

This hybrid DC-area role requires CISSP/CISM/CRISC and 5+ years of RMF/A&A experience; you will lead A&A, SSPs, SIAs, POA&Ms, and continuous monitoring.

Travel is limited; you will collaborate with SO, ISSM, CISO and engineering teams to strengthen security posture.