Lead ISSO - CISSP | RMF, A&A, FedRAMP Expert

IBSS; Silver Spring (MD); On-site; USD 140,000 - 150,000; Full time

Benefits offered by this job

Medical/Dental/Vision

401K matching

Tuition reimbursement

Paid time off

FSA/DCA

Job summary

IBSS Corp. is seeking a Lead Information System Security Officer (ISSO) – CISSP to guide RMF processes for a distributed federal information system in Silver Spring, MD. You will oversee risk management, security controls, assessment, authorization, and continuous monitoring, while mentoring junior ISSOs.

The role requires CISSP, strong RMF/FedRAMP experience, and cloud security oversight, including Azure, with the ability to work across multidisciplinary teams and senior stakeholders.

Qualifications

• Bachelor's degree in cybersecurity, information technology, or related field or equivalent
• CISSP certification
• Experience with federal risk management, assessment, and authorization activities
• Advanced knowledge of NIST RMF, FISMA, CSF, and FedRAMP
• Experience with cloud security, especially Azure, and ICAM/PKI

Responsibilities

• Lead RMF activities across the RMF lifecycle (categorization, controls, assessment, authorization, continuous monitoring)
• Coordinate A&A activities and apply CSF, RMF, FISMA, and FedRAMP requirements
• Advise stakeholders on security requirements, deficiencies, and risk
• Develop and maintain SSPs, CONOPS, diagrams, SAPs, SARs, POA&Ms and risk assessments
• Mentor ISSOs and provide guidance on complex RMF and security topics

Skills

CISSP

RMF

A&A processes

FedRAMP

ICAM

PKI

Vulnerability management

Cloud security

Azure

Education

Bachelor's degree in cybersecurity or related

Tools

SCAP tools

CSAM/JCAM

Job description

IBSS Corp. is seeking a Lead Information System Security Officer (ISSO) – CISSP to guide RMF processes for a distributed federal information system in Silver Spring, MD. You will oversee risk management, security controls, assessment, authorization, and continuous monitoring, while mentoring junior ISSOs.

The role requires CISSP, strong RMF/FedRAMP experience, and cloud security oversight, including Azure, with the ability to work across multidisciplinary teams and senior stakeholders.