Lead Information System Security Officer (ISSO)

Ortman Consulting LLC; Washington (District of Columbia); Hybrid; USD 140,000 - 190,000; Full time

Job summary

Ortman Consulting LLC in Washington, DC is seeking a Lead Information System Security Officer to lead information security support for a federal agency. You will own the RMF/authorization program for a FISMA-Moderate enterprise and direct continuous monitoring, POA&M management, and CSAM governance while mentoring a small ISSO team.

The role requires U.S. citizenship with eligibility for Tier 4 High-Risk Public Trust. Hybrid work in the DC area is offered.

Qualifications

• 8+ years of cybersecurity experience with hands-on RMF/ATO and continuous monitoring for FISMA-Moderate systems.
• Experience maintaining authorization packages, POA&Ms, and CSAM documentation (CSAM strongly preferred; eMASS or Xacta considered).
• Strong knowledge of NIST SP 800-53, NIST SP 800-37 (RMF), and FISMA; familiarity with FedRAMP concepts.
• Demonstrated ability to lead assessments, coordinate remediation with technical teams, and maintain audit-ready evidence.

Responsibilities

• Lead RMF/ATO program across a FISMA-Moderate enterprise, directing continuous monitoring, POA&M management, and security-artifact governance in CSAM; mentor a small ISSO team.

Skills

RMF/ATO

Continuous monitoring

CSAM governance

eMASS/Xacta

NIST SP 800-53

NIST SP 800-37 RMF

FISMA familiarity

Lead assessments

Remediation coordination

Audit evidence

Citizenship Tier4

Job description

Lead Information System Security Officer (ISSO)

Ortman Consulting is hiring a Lead ISSO (1 opening) to lead information system security support for a federal agency in Washington, DC. You'll own the RMF/authorization program across a FISMA-Moderate enterprise — directing continuous monitoring, POA&M management, and security‑artifact governance in CSAM, and mentoring a small ISSO team. Hybrid (DC area). U.S. citizenship and Tier 4 High‑Risk Public Trust eligibility required.

Requirements

Minimum Qualifications:

• 8+ years of cybersecurity experience, including hands‑on RMF/ATO and continuous monitoring for FISMA‑Moderate systems
• Experience maintaining system authorization packages, POA&Ms, and control‑inheritance documentation (CSAM strongly preferred; eMASS or Xacta considered)
• Strong working knowledge of NIST SP 800‑53, NIST SP 800‑37 (RMF), and FISMA; familiarity with FedRAMP concepts
• Demonstrated ability to lead assessments, coordinate remediation with technical teams, and maintain audit‑ready evidence
• U.S. citizen; able to obtain and maintain a Tier 4 High‑Risk Public Trust

Preferred:

• CISSP, CISM, or CAP/CGRC certification
• Prior Lead ISSO or ISSM experience at a federal civilian agency