Lead ISSO for OT RMF & ATO (Level III)

onezerollc; Baltimore (MD); On-site; USD 120,000 - 180,000; Full time

Benefits offered by this job

Health insurance

Dental insurance

Vision insurance

Life insurance

401(k) with company matching

Paid time off & holidays

Employee referral program

Educational assistance

Job summary

OneZero Solutions, LLC is seeking an Information System Security Officer (SME), Level III, to manage RMF across SFLC OT and Platform IT systems. The role leads ATO activities, maintains authorization artifacts, and coordinates with the OT Security Manager on policy and risk posture.

The ideal candidate has 10+ years in cybersecurity with 5+ years as an ISSO, strong knowledge of A&A processes, and experience with DHS/DoD security requirements.

Qualifications

• Ten (10) or more years of cybersecurity experience, including at least five (5) years serving as an ISSO or equivalent with direct ownership of federal A&A packages.
• Experience sustaining authorization through continuous monitoring; POA&M management.
• Experience with security documentation, interconnection documents, contingency/disaster recovery planning and testing.

Responsibilities

• Serve as designated ISSO for SFLC OT and lead RMF process for systems.
• Support ISSM in maintaining programs, procedures, and policies protecting sensitive information.
• Prepare RMF/A&A packages and ensure timely submission for ATO/sustainment.
• Maintain RMF status, review logs, and coordinate remediation of vulnerabilities and compliance findings.
• Lead authorization strategy for the most complex systems within the portfolio.

Skills

RMF (NIST SP 800-37)

ISSO experience

A&A packages

Vulnerability assessments

Policy documentation

Incident response

DISA STIGs

POA&M management

Interconnection docs (ISAs MOUs SLAs)

Change management

Education

Bachelor's degree in cybersecurity or related field

Tools

eMASS (or successor)

ACAS/Nessus

Job description

OneZero Solutions, LLC is seeking an Information System Security Officer (SME), Level III, to manage RMF across SFLC OT and Platform IT systems. The role leads ATO activities, maintains authorization artifacts, and coordinates with the OT Security Manager on policy and risk posture.

The ideal candidate has 10+ years in cybersecurity with 5+ years as an ISSO, strong knowledge of A&A processes, and experience with DHS/DoD security requirements.