Lead Information Security Officer (ISSO) – RMF Expert

C3EL; Washington (District of Columbia); On-site; USD 140,000 - 190,000; Full time

Job summary

C3EL seeks a Lead Information System Security Officer (ISSO) to provide on-site cybersecurity and RMF sustainment support in Washington, D.C. The role acts as the single point of accountability for technical performance and remains a hands-on practitioner, leading the ISSO program and coordinating with government stakeholders.

The ideal candidate has extensive RMF/ISSO experience, with strong leadership skills to manage a two-person team and deliver audit-ready documentation under strict

Qualifications

• Eligibility to obtain Tier 4 High‑Risk Public Trust.
• Minimum 10 years in cybersecurity.
• Minimum 7 years in federal RMF/ISSO work.
• Minimum 3 years leading ISSO or authorization teams.
• Hands-on CSAM experience with system profiles, controls, evidence, POA&M, and authorization workflows.
• Working knowledge of NIST SP 800-37, 800-53, 800-53B, FIPS 199, FISMA, and applicable guidance.
• Familiarity with GRC, ITSM, SIEM, scanner, identity, endpoint, and cloud-security platforms.
• Direct experience briefing and coordinating with ISSMs, CISOs, AOs, AODRs, System Owners, assessors, and senior Government officials.
• Direct experience overseeing SSPs, SAPs, SARs, POA&Ms, risk assessments, control statements, and evidence packages.
• Expert knowledge of all seven RMF steps, ATO, reauthorization, ongoing authorization, control baselines, and inheritance.

Responsibilities

• Provide on-site cybersecurity and RMF sustainment support.
• Chair internal quality reviews and ensure deliverables are audit ready.
• Manage technical risks, issues, escalations, SLA/KPI/AQL performance, action items, and corrective actions.
• Support weekly/monthly/quarterly reports, including authorization, vulnerability, POA&M, audit, and staffing status.
• Lead a team of two Senior ISSOs and cover during absences or surges.
• Produce accurate, concise, audit-ready Government cybersecurity documentation.
• Support team coverage from 7:00 a.m. to 6:00 p.m. ET and after-hours incident coverage as needed.

Skills

RMF leadership

NIST SP 800-37/800-53 knowledge

GRC

SIEM

ServiceNow

Education

Associate's degree in Cybersecurity

Tools

ServiceNow

Splunk

Vulnerability scanners

Job description

C3EL seeks a Lead Information System Security Officer (ISSO) to provide on-site cybersecurity and RMF sustainment support in Washington, D.C. The role acts as the single point of accountability for technical performance and remains a hands-on practitioner, leading the ISSO program and coordinating with government stakeholders.

The ideal candidate has extensive RMF/ISSO experience, with strong leadership skills to manage a two-person team and deliver audit-ready documentation under strict