ISSO: RMF Security & Compliance Specialist

Columbia Technology Partners; Corridor North (MD); On-site; USD 120,000 - 150,000; Full time

Job summary

Columbia Technology Partners seeks an Information Systems Security Officer (ISSO) to support security and compliance across mission-critical environments. The role emphasizes RMF activities, SSPs, and A&A processes, collaborating with ISSMs, engineers, administrators, and government stakeholders.

The position includes day-to-day security operations, documentation development, and risk assessment support, with potential progression to ISSO 3 responsibilities in leadership and program oversight.

Qualifications

• Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or a related discipline from an accredited college or university.
• Ten (10) years of experience as an Information Systems Security Officer supporting programs and contracts of similar scope, type, and complexity.
• Four (4) additional years of ISSO experience may be substituted in lieu of a bachelor's degree.
• DoD 8570 compliance with Information Assurance Management (IAM) Level I or higher is required.
• Experience in at least two (2) of the following areas: Security tools and technologies; Hardware and software security implementation; Communication protocols; Encryption techniques and technologies.

Responsibilities

• Implement, coordinate, and enforce information systems security policies, standards, and methodologies.
• Maintain the operational security posture of information systems and ensure compliance with applicable security requirements.
• Support security authorization activities in accordance with RMF requirements.
• Develop, maintain, and review security documentation, including SSPs, Risk Assessment Reports, C&A packages, and System Requirements Traceability Matrices (SRTMs).
• Evaluate security solutions to ensure compliance with requirements for processing classified information.
• Assist with vulnerability assessments, risk assessments, and security impact analyses.
• Administer user identification and authentication mechanisms for assigned systems.
• Maintain configuration management for security-relevant hardware, software, and firmware.
• Manage and assess system changes to determine security impacts.
• Maintain records for information systems and security-related assets, including upgrades and modifications.
• Support the ISSM in maintaining the appropriate information assurance posture for systems, programs, and enclaves.
• Perform day-to-day security operations and assist with the management of security aspects of assigned systems.
• Lead information assurance activities and serve as ISSM when required.
• Provide daily oversight to contractor ISSOs and act as Approval Authority as needed.
• Lead planning and implementation of security programs and policies.

Skills

Security policy enforcement

RMF experience

NIST SP 800-53 familiarity

Team collaboration

Education

Bachelor's degree in Computer Science, Cybersecurity, IT or related field

Tools

Documentation templates

Job description

Columbia Technology Partners seeks an Information Systems Security Officer (ISSO) to support security and compliance across mission-critical environments. The role emphasizes RMF activities, SSPs, and A&A processes, collaborating with ISSMs, engineers, administrators, and government stakeholders.

The position includes day-to-day security operations, documentation development, and risk assessment support, with potential progression to ISSO 3 responsibilities in leadership and program oversight.