Lead ISSO / Program Manager

RJ IT Solutions; Washington (District of Columbia); On-site; USD 150,000 - 210,000; Full time

Job summary

RJ IT Solutions in Washington, DC seeks a senior cybersecurity program manager with hands-on ISSO/ISSM experience to lead federal contract tasks across risk, authorization, and governance. You will coordinate with ISSM, CISO, AO/AODR, and system owners to ensure secure operations for FISMA Moderate systems.

Responsibilities include directing contractor ISSO activities, overseeing artifact development and reviews, maintaining risk/issue registers, and presenting weekly to quarterly reports.

Qualifications

• Fifteen or more years of federal cybersecurity experience including direct ISSO/ISSM work on FISMA Moderate systems.
• Demonstrated program management of a federal cybersecurity support contract of comparable scope.
• Active CISSP.
• PMP or CGRC.
• Bachelor's degree or equivalent experience.
• Working familiarity with CSAM or an equivalent federal authorization repository, ServiceNow, Splunk, and an enterprise vulnerability scanner.

Responsibilities

• Direct contractor ISSO activities and ensure consistent execution across all supported systems.
• Serve as primary technical interface to the ISSM, CISO, AO and AODR, System Owners, and other Government cybersecurity stakeholders.
• Oversee development, review, quality control, and submission of authorization-package artifacts; chair internal quality reviews of every deliverable before Government submission.
• Maintain the risk and issue register; escalate to Government leadership as warranted.
• Represent the contractor in DFC governance forums, including the Enterprise Review Board, Change Control Board, Cybersecurity Steering Committee, Risk Management Working Group, and Privacy Working Group.
• Own the Program Management Plan, Communications Plan, and Quality Management Plan; deliver Weekly Activity Reports, Monthly Program Status Reports, and Quarterly Executive Review Materials.
• Coordinate invoicing, staffing actions, and contract-level reporting.

Skills

Federal cybersecurity experience

ISSO/ISSM

Program management

Active CISSP

PMP or CGRC

CSAM familiarity

ServiceNow

Splunk

Vulnerability scanner

Education

Bachelor's degree or equivalent experience

Tools

CSAM

ServiceNow

Splunk

Enterprise vulnerability scanner

Job description

Purpose. Single point of accountability for technical execution across all eight task areas, and for cost, schedule, quality, staffing, and deliverable acceptance at the contract level.

Reports to: RJIT program management. Takes operational direction from the DFC ISSM. Serves as the single point of contact to the Contracting Officer's Representative.

Core Responsibilities

• Direct contractor ISSO activities and ensure consistent execution across all supported systems.
• Serve as primary technical interface to the ISSM, CISO, AO and AODR, System Owners, and other Government cybersecurity stakeholders.
• Oversee development, review, quality control, and submission of authorization-package artifacts; chair internal quality reviews of every deliverable before Government submission.
• Maintain the risk and issue register; escalate to Government leadership as warranted.
• Represent the contractor in DFC governance forums, including the Enterprise Review Board, Change Control Board, Cybersecurity Steering Committee, Risk Management Working Group, and Privacy Working Group.
• Own the Program Management Plan, Communications Plan, and Quality Management Plan; deliver Weekly Activity Reports, Monthly Program Status Reports, and Quarterly Executive Review Materials.
• Coordinate invoicing, staffing actions, and contract-level reporting.

Required qualifications.

Fifteen or more years of federal cybersecurity experience, including direct ISSO or ISSM work on FISMA Moderate systems. Demonstrated program management of a federal cybersecurity support contract of comparable scope. Active CISSP. PMP or CGRC. Bachelor\'s degree or equivalent experience. Working familiarity with CSAM or an equivalent federal authorization repository, ServiceNow, Splunk, and an enterprise vulnerability scanner.

Critical constraint.

This individual maintain hands-on cybersecurity expertise and not function solely as an administrative manager. Candidates whose recent experience is exclusively executive or portfolio-level do not meet the standard.