ISSO: RMF/ATO Lead with TS/SCI Poly

IBM; Chantilly (VA); On-site; USD 120,000 - 170,000; Full time

Job summary

IBM Consulting seeks an ISSO to lead planning, execution, and maintenance of RMF accreditation to achieve and sustain an Authority to Operate (ATO).

You will collaborate with software and system architects to ensure security controls are designed and implemented across the system, coordinating across teams to develop documentation and assessments, and driving continuous monitoring to meet DoD/IC requirements.

Qualifications

• Demonstrated experience leading one or more systems through RMF ATO processes.
• Must be a self-starter comfortable with high-priority tasks.
• Strong written and verbal communication, project management and problem-solving skills.
• Must possess strong knowledge of NIST RMF, NIST SP 800-53 Rev. 5, DoD & IC authorization processes.
• Must possess Security+ certification.
• Must have experience with risk management, security control implementation, vulnerability management, continuous monitoring, and POA&M management.
• Must possess a TS/SCI CI Poly security clearance on day 1.

Responsibilities

• Plan, execute, and maintain system accreditation and authorization activities to achieve and sustain ATO per RMF, DoD, IC requirements.
• Serve as primary security lead coordinating with architects to ensure designs meet controls and compliance.
• Develop and manage security documentation; perform assessment activities and cross-functional coordination.
• Oversee risk management, continuous monitoring, and ensure controls meet security and regulatory requirements.
• Collaborate on cross-functional security initiatives to maintain readiness and audit readiness.

Skills

RMF expertise

Self-starter

Technical writing

Communication

Project management

Problem-solving

Education

Bachelor's Degree

Tools

3PAO

FedRAMP

NIST SP 800-53 Rev.5

Job description

IBM Consulting seeks an ISSO to lead planning, execution, and maintenance of RMF accreditation to achieve and sustain an Authority to Operate (ATO).

You will collaborate with software and system architects to ensure security controls are designed and implemented across the system, coordinating across teams to develop documentation and assessments, and driving continuous monitoring to meet DoD/IC requirements.