Lead ISSO / Program Manager

RJIT Solutions; Washington (District of Columbia); On-site; USD 180,000 - 230,000; Full time

Job summary

RJIT Solutions in Washington, DC seeks a senior federal cybersecurity program manager to lead ISSO/ISSM activities across eight task areas, ensuring cost, schedule, quality, staffing, and deliverable acceptance at contract level.

The role requires deep hands-on cybersecurity expertise, direct work with the ISSM, CISO, AO/AODR, system owners, and government stakeholders, plus governance participation and program management planning.

Qualifications

• Fifteen or more years of federal cybersecurity experience, including direct ISSO or ISSM work on FISMA Moderate systems.
• Demonstrated program management of a federal cybersecurity support contract of comparable scope.
• Active CISSP.
• PMP or CGRC.
• Bachelor's degree or equivalent experience.
• Working familiarity with CSAM or an equivalent federal authorization repository, ServiceNow, Splunk, and an enterprise vulnerability scanner.

Responsibilities

• Direct contractor ISSO activities and ensure consistent execution across all supported systems.
• Serve as primary technical interface to the ISSM, CISO, AO and AODR, System Owners, and other Government cybersecurity stakeholders.
• Oversee development, review, quality control, and submission of authorization-package artifacts; chair internal quality reviews of every deliverable before Government submission.
• Maintain the risk and issue register; escrow to Government leadership as warranted.
• Represent the contractor in DFC governance forums, including the Enterprise Review Board, Change Control Board, Cybersecurity Steering Committee, Risk Management Working Group, and Privacy Working Group.
• Own the Program Management Plan, Communications Plan, and Quality Management Plan; deliver Weekly Activity Reports, Monthly Program Status Reports, and Quarterly Executive Review Materials.
• Coordinate invoicing, staffing actions, and contract-level reporting.

Skills

Federal cybersecurity experience

ISSO/ISSM experience

Education

Bachelor's degree or equivalent experience

Tools

CSAM

ServiceNow

Splunk

Vulnerability scanner

Job description

Purpose. Single point of accountability for technical execution across all eight task areas, and for cost, schedule, quality, staffing, and deliverable acceptance at the contract level.

Reports to: RJIT program management. Takes operational direction from the DFC ISSM. Serves as the single point of contact to the Contracting Officer's Representative.

Core responsibilities

• Direct contractor ISSO activities and ensure consistent execution across all supported systems.
• Serve as primary technical interface to the ISSM, CISO, AO and AODR, System Owners, and other Government cybersecurity stakeholders.
• Oversee development, review, quality control, and submission of authorization-package artifacts; chair internal quality reviews of every deliverable before Government submission.
• Maintain the risk and issue register; escrow to Government leadership as warranted.
• Represent the contractor in DFC governance forums, including the Enterprise Review Board, Change Control Board, Cybersecurity Steering Committee, Risk Management Working Group, and Privacy Working Group.
• Own the Program Management Plan, Communications Plan, and Quality Management Plan; deliver Weekly Activity Reports, Monthly Program Status Reports, and Quarterly Executive Review Materials.
• Coordinate invoicing, staffing actions, and contract-level reporting.

Required qualifications

• Fifteen or more years of federal cybersecurity experience, including direct ISSO or ISSM work on FISMA Moderate systems.
• Demonstrated program management of a federal cybersecurity support contract of comparable scope.
• Active CISSP.
• PMP or CGRC.
• Bachelor's degree or equivalent experience.
• Working familiarity with CSAM or an equivalent federal authorization repository, ServiceNow, Splunk, and an enterprise vulnerability scanner.

Critical constraint

This individual maintain hands-on cybersecurity expertise and not function solely as an administrative manager. Candidates whose recent experience is exclusively executive or portfolio-level do not meet the standard.