ISSO: RMF/ATO Lead for DoD/IC Systems

IBM; Alexandria (VA); On-site; USD 120,000 - 180,000; Full time

Job summary

IBM Consulting is seeking an ISSO to lead RMF/ATO activities, coordinating with architects and cross-functional teams to ensure security controls and compliance. The role requires a TS/SCI CI Poly clearance on day one, Security+ certification, and strong communication and technical writing skills. Bachelor's degree is preferred.

The successful candidate will manage risk, continuous monitoring, and documentation across DoD/IC programs, shaping secure, compliant cloud and system environments.

Qualifications

• Leadership of RMF/ATO processes
• Strong technical writing and communication skills
• Self-starter with ability to manage high-priority tasks
• Knowledge of NIST RMF, NIST SP 800-53 Rev. 5, and DoD/IC processes
• Security+ certification required
• Experience with risk management, vulnerability management, and continuous monitoring
• Must have TS/SCI CI Poly clearance on day 1

Responsibilities

• Plan, execute, and maintain system accreditation activities to achieve and sustain ATO per RMF/DoD/IC requirements.
• Lead security posture efforts with software and system architects to meet controls and coordinate across teams.
• Develop and manage security documentation and assessment activities; oversee risk management and continuous monitoring.

Skills

RMF/ATO leadership

Technical writing

Communication

Project management

Problem-solving

NIST RMF knowledge

Security+ certification

TS/SCI CI Poly clearance

Education

Bachelor's Degree

Job description

IBM Consulting is seeking an ISSO to lead RMF/ATO activities, coordinating with architects and cross-functional teams to ensure security controls and compliance. The role requires a TS/SCI CI Poly clearance on day one, Security+ certification, and strong communication and technical writing skills. Bachelor's degree is preferred.

The successful candidate will manage risk, continuous monitoring, and documentation across DoD/IC programs, shaping secure, compliant cloud and system environments.