ISSO: RMF Compliance & Cyber Risk Lead

Base-2 Solutions, LLC.; Annapolis (MD); On-site; USD 90,000 - 130,000; Full time

Job summary

Base-2 Solutions is seeking an Information Systems Security Officer (ISSO) to support compliance, risk management, and security policy enforcement for mission-critical systems.

The candidate will document thoroughly, coordinate with government stakeholders, and drive information security initiatives while navigating complex cybersecurity environments. A CISSP/CAP/SEC+ or equivalent cert is preferred.

Qualifications

• Experience with NIST RMF and DoD/IC regulations.
• Experience maintaining SSPs, SARs, POA&Ms and monitoring plans.
• Experience with security tools: ACAS, Nessus, Splunk, HBSS, eMASS, Xacta.
• Knowledge of firewalls, SIEMs, VPNs, IDS/IPS, DLP, PKI, MFA.
• Experience with Windows, Linux, Unix, macOS systems and cloud environments.

Responsibilities

• Ensure system compliance with federal, DoD, IC regulations and RMF.
• Maintain security documentation: SSPs, SARs, POA&Ms, Continuous Monitoring.
• Coordinate security assessments, audits, and inspections.
• Conduct risk assessments and provide remediation recommendations.
• Oversee RMF-based system authorization activities.
• Monitor security posture, incident response, and remediation efforts.
• Collaborate with ISSEs, admins, and program managers to embed security requirements.
• Provide security awareness training and enforce proper practices.
• Serve as liaison with government customers for security updates.

Skills

Security frameworks

Regulatory compliance

Security documentation

Cross-team collaboration

Tools

ACAS

Nessus

Splunk

HBSS

eMASS

Xacta

JIRA

Confluence

ServiceNow

Job description

Base-2 Solutions is seeking an Information Systems Security Officer (ISSO) to support compliance, risk management, and security policy enforcement for mission-critical systems.

The candidate will document thoroughly, coordinate with government stakeholders, and drive information security initiatives while navigating complex cybersecurity environments. A CISSP/CAP/SEC+ or equivalent cert is preferred.