Lead ISSO - Federal RMF & CSAM Expert (On-Site DC)

Securepro Inc; Arlington (VA); On-site; USD 120,000 - 190,000; Full time

Benefits offered by this job

401(k)

401(k) matching

Dental insurance

Health insurance

Job summary

SecurePro is seeking experienced Lead and Senior Information System Security Officers to support a federal cybersecurity program in Washington, DC. The role covers RMF, POA&M, continuous monitoring, vulnerability management, and audit support across ~32 FISMA Moderate systems.

Roles include Lead ISSO responsibilities such as directing workstreams, ensuring deliverable quality, and briefing Authorizing Officials. On-site five days a week; U.S.

Qualifications

• U.S. citizenship required and ability to obtain Tier 4 High Risk Public Trust.
• Hands-on experience with CSAM supporting federal authorization and RMF activities.
• Experience executing NIST SP 800-37 Rev. 2 RMF for FISMA Moderate systems.
• Hands-on ownership of the POA&M lifecycle through validated closure.
• Proven ability to work on-site in Washington, DC, five days per week.

Responsibilities

• Execute the RMF lifecycle for FISMA Moderate systems.
• Develop and quality-control authorization packages (SSPs, SARs, RARs, POA&Ms).
• Manage POA&Ms from identification to closure.
• Perform continuous monitoring and vulnerability analysis.
• Verify security logging and audit coverage using Splunk.
• Maintain CSAM data as the authoritative GRC platform.
• Coordinate with ISSMs, CISOs, AO, and System Owners.
• Lead responses to audits, IG reviews, and independent assessments.

Skills

NIST RMF

CSAM

Splunk

ServiceNow

POA&M lifecycle

FISMA Moderate

Audit coordination

Security documentation

Incidence coordination

RMF lifecycle

Tools

CSAM

Splunk

ServiceNow

Job description

SecurePro is seeking experienced Lead and Senior Information System Security Officers to support a federal cybersecurity program in Washington, DC. The role covers RMF, POA&M, continuous monitoring, vulnerability management, and audit support across ~32 FISMA Moderate systems.

Roles include Lead ISSO responsibilities such as directing workstreams, ensuring deliverable quality, and briefing Authorizing Officials. On-site five days a week; U.S.