ISSO: RMF/ATO Security Lead & Assessments

CGS Federal (Contact Government Services); Philadelphia (Philadelphia County); On-site; USD 120,000 - 150,000; Full time

Benefits offered by this job

Health, Dental, and Vision

Life Insurance

401k

Flexible Spending Account (FSA)

Paid Time Off and holidays

Job summary

CGS Federal seeks an experienced ISSO to lead RMF/DIACAP transition and secure DoC systems. You will oversee security assessment, ATO activities, and lifecycle authorization from a government operations base in Washington, DC.

You will develop risk assessments, guidance, and documentation, coordinating with ISSM, SCA, and AO, while ensuring compliance with DoC RMF and NIST standards. This role emphasizes collaboration and continuous security improvement.

Qualifications

• Bachelor’s degree in a related field.
• 5+ years as IA/ISSE/ISSO or similar role in ATO package development.
• eMASS experience.
• Security certifications such as CCNA Security, CySA+, GICSP, GSEC, Security+ CE, SSCP or higher.
• Strong desktop publishing skills using Microsoft Word and Excel.
• Ability to multi-task in a deadline-oriented environment.
• Ideally CISSP, CASP or similar.
• Master’s degree preferred.

Responsibilities

• Review systems to identify potential security weaknesses and recommend improvements.
• Maintain responsibility for managing cybersecurity risk from an organizational perspective.
• Identify organizational risks, prioritize those risks, and maintain a risk registry for escalation to senior leadership.
• Provide security guidance and RMF validation using NIST RMF, DoC policies.
• Provide CM recommendations and coordinate changes with ISSM, SCA, and AO.
• Maintain vulnerability scanning tool compliance (HBSS/ACAS) and patch management to ensure compliance.
• Support security authorization activities and transition to DoC RMF.
• Provide SME guidance for cyber security and trusted system technologies.
• Research, write, and finalize recommendations on cyber security policy and assessment reports.
• Conduct risk assessment research including risk thresholds and scoring.
• Support mitigation strategies and implementation guidance for cyber risk findings.

Skills

RMF/NIST 800-53

Security assessment

Risk management

Documentation

Vulnerability management

Configuration management

Policy guidance

Stakeholder communication

Education

Bachelor’s Degree

Master’s Degree in Cybersecurity

Tools

eMASS

HBSS

ACAS

Job description

CGS Federal seeks an experienced ISSO to lead RMF/DIACAP transition and secure DoC systems. You will oversee security assessment, ATO activities, and lifecycle authorization from a government operations base in Washington, DC.

You will develop risk assessments, guidance, and documentation, coordinating with ISSM, SCA, and AO, while ensuring compliance with DoC RMF and NIST standards. This role emphasizes collaboration and continuous security improvement.