ISSO (RMF/DIACAP) – Security Assessment Lead

CGS Federal (Contact Government Services); Washington (District of Columbia); On-site; USD 110,000 - 160,000; Full time

Benefits offered by this job

Health Insurance

Dental Insurance

Vision Insurance

Life Insurance

401k

Flexible Spending Account

Paid Time Off

Job summary

CGS Federal (Contact Government Services) is seeking an Information Systems Security Officer (ISSO) to support Department of Commerce systems at the Herbert Hoover Building in Washington, DC. The role covers full lifecycle A&A management under RMF, with focus on assessment and authorization in line with NIST 800.53 and government policies.

The ideal candidate brings DIACAP/RMF experience, strong documentation skills, and the ability to operate at the intersection of policy, risk, and technical

Qualifications

• Bachelor's degree required and five years IA/ISSO experience.
• Experience generating security documentation for ATO packages.
• Proficiency with RMF, DIACAP transitions, and DoC security policies.
• Strong writing and publishing skills using MS Word/Excel.
• Experience with eMASS onboarding and vulnerability management.

Responsibilities

• Review and oversee RMF/ATO activities across full system lifecycle.
• Identify and document security weaknesses, propose improvements, and track remediation.
• Maintain organizational risk registry and report to senior leadership.
• Provide security guidance and validation using NIST RMF, DoC, and security policies.
• Coordinate CM changes with ISSM, SCA, and AO and ensure compliance.

Skills

RMF experience

DIACAP experience

Security assessment docs

Vulnerability management

Risk management

NIST 800-53 knowledge

Education

Bachelor's Degree

Tools

eMASS

HBSS

ACAS

IAVM

Job description

CGS Federal (Contact Government Services) is seeking an Information Systems Security Officer (ISSO) to support Department of Commerce systems at the Herbert Hoover Building in Washington, DC. The role covers full lifecycle A&A management under RMF, with focus on assessment and authorization in line with NIST 800.53 and government policies.

The ideal candidate brings DIACAP/RMF experience, strong documentation skills, and the ability to operate at the intersection of policy, risk, and technical