ISSO: RMF & ATO Compliance Leader

Base-2 Solutions, LLC.; Norfolk (VA); Hybrid; USD 120,000 - 180,000; Full time

Job summary

Base-2 Solutions, LLC. seeks an Information System Security Officer to collaborate with application leads, administrators, developers, and testers to ensure security compliance and achieve or maintain Authority to Operate (ATO).

The role follows the RMF process for full/partial testing, continuous monitoring, and no test scenarios, updating SSPs, SCTM, STPs, and POAMs in Xacta. The ideal candidate will load STIG checklists, ACAS scans, help implement STIGs, and respond to questions from ST&E,

Qualifications

• Develop, implement, and enforce security policies, standards, and procedures to ensure regulatory compliance and protect information assets.
• Conduct risk assessments and identify vulnerabilities in systems, networks, and applications.
• Develop and oversee mitigation strategies to reduce security risks.
• Monitor systems and networks for security breaches and anomalous activity.
• Respond to security incidents, investigate root causes, and implement corrective actions.

Responsibilities

• Work with application leads, sysadmin, DBAs, developers, and testers to maintain security compliance and achieve/maintain ATO.
• Follow RMF process for full/ partial testing and continuous monitoring.
• Update Xacta documentation (SSP, SCTM, STP, POAM).
• Load artifacts such as STIG checklists and ACAS scans.
• Assist with STIG implementation and remediation of scan findings.
• Provide responses to ST&E, ISSMs, and SCAs during assessments.

Skills

Security policy enforcement

Risk assessments

Mitigation strategies

Incident response

Monitoring & detection

Education

Bachelor's degree in Computer Science / related field

High School with 13+ years of experience

Associates with 11+ years of experience

Bachelor's with 9+ years of experience

Master's with 7+ years of experience

PhD with 5+ years of experience

Job description

Base-2 Solutions, LLC. seeks an Information System Security Officer to collaborate with application leads, administrators, developers, and testers to ensure security compliance and achieve or maintain Authority to Operate (ATO).

The role follows the RMF process for full/partial testing, continuous monitoring, and no test scenarios, updating SSPs, SCTM, STPs, and POAMs in Xacta. The ideal candidate will load STIG checklists, ACAS scans, help implement STIGs, and respond to questions from ST&E,