ISSO: RMF & ATO Specialist (Remote/Hybrid)

CGS Federal (Contact Government Services); Los Angeles (CA); Híbrido; USD 92.000 - 125.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Health insurance

Dental/Vision insurance

401k

Paid Time Off

Flexible Spending Account

Descripción de la vacante

CGS Federal is seeking an Information Systems Security Officer (ISSO) for Los Angeles, CA, with remote/hybrid options and a Stated focus on RMF/A&A processes. The role supports DoC systems and aims to achieve Authorization to Operate (ATO) through full RMF lifecycle management.

The candidate should have at least five years in IA/ISSE/ISSO roles, relevant certifications, and strong documentation skills to develop, review, and sustain security controls and assessment artifacts.

Formación

• Bachelor’s degree required.
• Minimum of five years as IA Analyst/ISSE/ISSO in ATO package development and security documentation.
• eMASS experience desired; DO C RMF familiarity a plus.
• Professional security certifications such as CCNA Security, CySA+, GICSP, GSEC, CompTIA Security+ CE, SSCP or higher.

Responsabilidades

• Review systems to identify security weaknesses and recommend improvements; document upgrades.
• Manage cybersecurity risk from an organizational perspective.
• Provide security guidance and RMF validation per DoC policies.
• Maintain vulnerability scanning tool compliance (HBSS/ACAS) and patch management.
• Assist transition from DIACAP to RMF compliance.

Conocimientos

RMF

A&A

Security risk

Documentation

eMASS

Educación

Bachelor's Degree

Master's Degree in Cybersecurity

Herramientas

HBSS

ACAS

DIACAP

RMF

STIG/IAVA

Descripción del empleo

CGS Federal is seeking an Information Systems Security Officer (ISSO) for Los Angeles, CA, with remote/hybrid options and a Stated focus on RMF/A&A processes. The role supports DoC systems and aims to achieve Authorization to Operate (ATO) through full RMF lifecycle management.

The candidate should have at least five years in IA/ISSE/ISSO roles, relevant certifications, and strong documentation skills to develop, review, and sustain security controls and assessment artifacts.