ISSO: RMF/ATO Lead for Mission-Critical Systems

acuCyber; Charleston (SC); Vor Ort; USD 110.000 - 150.000; Vollzeit

Zusammenfassung

acuCyber seeks an Information Systems Security Officer (ISSO) to drive the authorization and ongoing security of mission apps, cloud infrastructure, and enterprise services. The ISSO collaborates with Government security personnel, developers, and engineers to maintain security documentation and ensure compliance with DoD and IC requirements.

The role is full-time and on-site at a Government facility in Charleston, SC or the National Capital Region, requiring hands-on risk assessment, evidence

Qualifikationen

• Experience performing RMF activities and obtaining/maintaining ATO for systems.
• Ability to develop and maintain System Security Plans (SSPs) and supporting evidence.
• Ability to review security assessments and coordinate remediation with engineering teams.

Aufgaben

• Support RMF activities to obtain and maintain Authority to Operate (ATO).
• Develop and maintain authorization documentation including SSPs and control descriptions.
• Coordinate with system owners, ISSMs, assessors, and engineers to prepare authorization packages and resolve findings.
• Maintain POA&Ms, track remediation progress, and communicate unresolved risks.
• Use eMASS to maintain authorization records and documentation.
• Review ACAS scan results and security testing reports to prioritize remediation.
• Assess security impact of software releases and infrastructure changes.
• Support continuous monitoring with current evidence and risk reporting.
• Work with cloud and DevSecOps engineers to embed security requirements into development workflows.
• Review access controls and protection of sensitive data.
• Support security incident reporting and corrective actions.
• Apply security overlays and support supply chain risk management.
• Prepare security status reports for Government stakeholders.

Kenntnisse

RMF experience

Security controls

Risk assessment

ACAS

eMASS

DevSecOps collaboration

Tools

SSP documentation tools

Jobbeschreibung

acuCyber seeks an Information Systems Security Officer (ISSO) to drive the authorization and ongoing security of mission apps, cloud infrastructure, and enterprise services. The ISSO collaborates with Government security personnel, developers, and engineers to maintain security documentation and ensure compliance with DoD and IC requirements.

The role is full-time and on-site at a Government facility in Charleston, SC or the National Capital Region, requiring hands-on risk assessment, evidence