ISSO & RMF/GRC Specialist (Hybrid DC)

Aderas, Inc; Washington (District of Columbia); Hybrid; USD 110,000 - 160,000; Full time

Benefits offered by this job

Pay for Life

Health insurance contribution

401k plan

Professional development / training

Disability coverage

Job summary

Aderas, Inc is seeking an experienced ISSO-focused professional to provide hands-on RMF and authorization support across the full system lifecycle for systems within the Client Enterprise boundary.

You’ll organize evidence for 3PAO/security assessments, maintain audit-ready artifacts, and support continuous monitoring, vulnerability management, and POA&M activities to sustain secure posture.

Qualifications

• ~5 years cybersecurity/RMF/GRC experience supporting enterprise systems
• Strong writing and stakeholder communication skills to meet deliverable quality expectations

Responsibilities

• Support RMF/authorization activities and prepare artifacts in CSAM/JCAM
• Produce audit-ready documentation with clear traceability between controls, evidence, findings, and POA&M
• Execute continuous monitoring processes and contribute to posture reporting
• Coordinate vulnerability management workflows and POA&M updates
• Coordinate Security Impact Analyses (SIA) for planned changes and ensure governance alignment
• Support incident coordination within ISSO scope with SOC/IR teams for RMF impacts
• Contribute to governance integration with System Owners and Privacy Office
• Maintain audit-ready CSAM artifacts (SSP/SAR/POA&M) and evidence libraries
• Assist with audit preparation and compliance reporting for FISMA/Governance
• Provide recommendations and documentation but not final Government decisions

Skills

RMF/GRC

Technical writing

Stakeholder communication

Cybersecurity

Education

Bachelor’s degree in IT/Cyber/related

Tools

CSAM/JCAM

Splunk

Job description

Aderas, Inc is seeking an experienced ISSO-focused professional to provide hands-on RMF and authorization support across the full system lifecycle for systems within the Client Enterprise boundary.

You’ll organize evidence for 3PAO/security assessments, maintain audit-ready artifacts, and support continuous monitoring, vulnerability management, and POA&M activities to sustain secure posture.