ISSO - RMF/NIST Expert for Government Systems

Talentify; Maryland; On-site; USD 120,000 - 160,000; Full time

Job summary

Base-2 Solutions in Maryland is seeking an Information Systems Security Officer (ISSO) to ensure the security posture of mission-critical systems by supporting compliance, managing risk, and enforcing security policies.

The ideal candidate will coordinate security assessments, produce SSPs and SARs, and collaborate with ISSEs, admins, and government stakeholders to drive information security initiatives.

Strong knowledge of NIST RMF, DoD/FedRAMP controls, and incident response is required.

Qualifications

• Experience with federal cybersecurity regulations and RMF.
• Strong documentation and reporting skills for SSP/SAR artifacts.
• Ability to coordinate security assessments with government stakeholders.

Responsibilities

• Ensure system compliance with federal, DoD, and IC regulations and standards including NIST, ICD 503, CNSS, and RMF.
• Maintain and update security documentation such as SSPs, SARs, POA&Ms, and Monitoring Plans.
• Coordinate and support security assessments, audits, and inspections by internal and external stakeholders.
• Conduct risk assessments and vulnerability analysis with mitigation recommendations.
• Facilitate and oversee RMF-based authorization activities.
• Monitor and report on system security posture, incidents, and remediation efforts.
• Collaborate with ISSEs, admins, and program managers to integrate security requirements into lifecycle.
• Provide security awareness training and enforce proper security practices.
• Act as liaison between the organization and government customers for timely communications.

Skills

NIST SP 800-53

RMF

ICD 503

CNSS

DoD STIGs

FISMA

FedRAMP

Tools

ACAS

Nessus

Splunk

HBSS

eMASS

Xacta

Job description

Base-2 Solutions in Maryland is seeking an Information Systems Security Officer (ISSO) to ensure the security posture of mission-critical systems by supporting compliance, managing risk, and enforcing security policies.

The ideal candidate will coordinate security assessments, produce SSPs and SARs, and collaborate with ISSEs, admins, and government stakeholders to drive information security initiatives.

Strong knowledge of NIST RMF, DoD/FedRAMP controls, and incident response is required.