ISSO: RMF/DIACAP Security Lead for ATO Programs

Contact Government Services, LLC; Washington (Washington County); On-site; USD 120,000 - 180,000; Full time

Benefits offered by this job

Health, Dental, and Vision

Life Insurance

401k

Flexible Spending Account

Paid Time Off

Job summary

Contact Government Services (CGS) is seeking an Information Systems Security Officer (ISSO) to lead RMF-based assessments and ATO packages for DoC systems. The role requires DIACAP/RMF experience, strong documentation skills, and the ability to guide security controls from initiation through authorization.

The position is based at the Herbert Hoover Building, Washington, DC, with a focus on lifecycle A&A management, risk assessment, and collaboration with the ISSM, SCA, and AO to maintain

Qualifications

• Bachelor’s degree required.
• Minimum of five years as IA Analyst/ISSE/ISSO or similar in ATO package development.
• Experience generating security documentation (requirements, security control assessment, STIG/IAVA).
• eMASS experience.
• Professional security certification such as CCNA Security, CySA+, GICSP, GSEC, Security+ CE, SSCP, or higher.

Responsibilities

• Review systems to identify security weaknesses and document upgrades.
• Manage cybersecurity risk from an organizational perspective.
• Maintain risk registry and present risks to senior leadership.
• Provide security guidance using NIST RMF, DoC, and local policies.
• Coordinate changes with ISSM, SCA, and AO; advise on CM for info system security software/hardware/firmware.
• Maintain vulnerability scanning tool compliance (HBSS/ACAS) and patch management (IAVM).
• Support ATO activities, transitioning to DoC RMF.
• Provide SME for cyber security and trusted system technology.
• Research, write, and finalize A&A assessments and security engineering practices.

Skills

RMF experience

Security assessment

NIST 800.53

DIACAP familiarity

Vulnerability management

Documentation writing

eMASS experience

Education

Bachelor’s Degree

Tools

HBSS

ACAS

IAVM

MS Word

Excel

Job description

Contact Government Services (CGS) is seeking an Information Systems Security Officer (ISSO) to lead RMF-based assessments and ATO packages for DoC systems. The role requires DIACAP/RMF experience, strong documentation skills, and the ability to guide security controls from initiation through authorization.

The position is based at the Herbert Hoover Building, Washington, DC, with a focus on lifecycle A&A management, risk assessment, and collaboration with the ISSM, SCA, and AO to maintain