ISSO - RMF ATO Specialist for DoC Systems

Cgsfederal; Atlanta (GA); On-site; USD 110,000 - 140,000; Full time

Benefits offered by this job

Health, Dental, and Vision

Life Insurance

401k

Flexible Spending Account (Health, Dep

Paid Time Off

Job summary

CGS is seeking an Information Systems Security Officer (ISSO) with RMF and RMF/ATO experience to support DoC systems at a Washington, DC site. The role covers full life‑cycle A&A management and security oversight per NIST 800‑53, aiding the transition from DIACAP to RMF.

The ISSO will lead risk assessment, document upgrades, and provide expert guidance for mitigation strategies and security testing. Strong writing and documentation skills are essential.

Qualifications

• Bachelor’s degree required, five+ years in IA/ISSE/ISSO roles with ATO package development.
• Experience with eMASS and security documentation.
• Strong writing skills and ability to follow industry standards.

Responsibilities

• Review systems to identify vulnerabilities and document upgrades.
• Manage cybersecurity risk from an organizational view.
• Maintain risk registry and present to senior leadership.
• Provide RMF guidance and DoC security policy compliance.
• Recommend CM changes and coordinate with ISSM, SCA and AO.
• Maintain vulnerability scanning tool compliance and patch management.
• Support DIACAP to RMF transition for DoC systems.
• Provide expert guidance on cybersecurity policy and risk assessments.
• Draft risk assessments, evaluate findings and suggest mitigations.

Skills

Security documentation

eMASS

Technical writing

MS Word & Excel

Multitasking

Education

Bachelor’s Degree

Master’s Degree in Cybersecurity (preferred)

Job description

CGS is seeking an Information Systems Security Officer (ISSO) with RMF and RMF/ATO experience to support DoC systems at a Washington, DC site. The role covers full life‑cycle A&A management and security oversight per NIST 800‑53, aiding the transition from DIACAP to RMF.

The ISSO will lead risk assessment, document upgrades, and provide expert guidance for mitigation strategies and security testing. Strong writing and documentation skills are essential.