Lead Senior Information System Security Officer

Jobtailor; Washington (District of Columbia); On-site; USD 150,000 - 190,000; Full time

Job summary

Jobtailor in Washington DC seeks an experienced Senior Information Security Manager to lead RMF activities, develop SSPs, and oversee a 13-person ISSO team. You will drive ATO decisions, manage risk assessments, and ensure compliance with federal standards.

Candidates must hold or qualify IAT III credentials (CISSP, CISM, or CASP+), have 10+ years in information security, and prefer DHS/DoD experience with FedRAMP and cloud security knowledge. Active Secret clearance desired.

Qualifications

• U.S. Citizenship required.
• FEMA EOD suitability or current DHS or FEMA EOD preferred.
• BS/BA + 15 years of applicable experience in information security.
• Must have one of the following Information Assurance Technician (IAT) Level III qualifications: CISSP, CISM, or CASP+.
• 10+ years of experience in information security.
• Demonstrated expertise in RMF, Information Security.
• Desired: Active Secret security clearance.
• Previous DHS or DoD experience.
• Experience with CSAM, RegScale, eMASS, or similar GRC tools.
• Experience supporting emergency operations or disaster response missions.
• Knowledge of cloud security and FedRAMP authorization processes.
• Experience with continuous monitoring and automated security tools.

Responsibilities

• Execute complete Risk Management Framework (RMF) activities for Authority to Operate (ATO) decisions
• Lead a team of 13 ISSO
• Develop and maintain System Security Plans (SSPs)
• Create and maintain Configuration Management Plans
• Conduct Security Impact Analyses and approve Change Requests
• Develop and test Contingency Plans and Incident Response Plans
• Conduct Risk Assessments, annual security assessments, and vulnerability assessments
• Develop security architecture designs, requirement traceability matrices, and authorization boundary diagrams
• Maintain Hardware and Software Inventory Lists and conduct FISMA Scorecard Analysis

Skills

RMF leadership

Risk Management

Team leadership

Security architecture design

Continuous Monitoring

Education

BS/BA + 15 years information security

Tools

CSAM

RegScale

EMASS

Automated security tools

Job description

• Execute complete Risk Management Framework (RMF) activities for Authority to Operate (ATO) decisions
• Lead a team of 13 ISSO
• Develop and maintain System Security Plans (SSPs)
• Create and maintain Configuration Management Plans
• Conduct Security Impact Analyses and approve Change Requests
• Develop and test Contingency Plans and Incident Response Plans
• Conduct Risk Assessments, annual security assessments, and vulnerability assessments
• Develop security architecture designs, requirement traceability matrices, and authorization boundary diagrams
• Maintain Hardware and Software Inventory Lists and conduct FISMA Scorecard Analysis

Requirements

• U.S. Citizenship required
• FEMA EOD suitability or Current DHS or FEMA EOD preferred
• BS/BA + 15 years of applicable experience in information security
• Must have one of the following Information Assurance Technician (IAT) Level III qualifications:
• - Certified Information System Security Professional (CISSP)
• - Certified Information Security Manager (CISM)
• - CompTIA Advanced Security Practitioner (CASP+)
• 10+ years of experience in information security
• Demonstrated expertise in RMF, Information
• Desired: Active Secret security clearance
• Previous DHS or DoD experience
• Experience with CSAM, RegScale, eMASS, or similar GRC tools
• Experience supporting emergency operations or disaster response missions
• Knowledge of cloud security and FedRAMP authorization processes
• Experience with continuous monitoring and automated security tools

Core Competencies

Demonstrates extensive expertise in Risk Management Framework (RMF) activities, including the development of System Security Plans (SSPs) and conducting comprehensive risk assessments. Proven leadership in managing information security teams and implementing security architecture designs while ensuring compliance with federal standards.

Highest-signal resume keywords

• Risk Management Framework (RMF)
• Certified Information System Security Professional (CISSP)
• Information Assurance Technician (IAT) Level III
• Security Impact Analysis
• Continuous Monitoring

ATS Optimization Keywords

Hard Skills

• Risk Assessment
• System Security Plans (SSPs)
• Configuration Management Plans
• Contingency Plans
• Incident Response Plans
• Vulnerability Assessments
• Security Architecture Design
• FISMA Scorecard Analysis
• Requirement Traceability Matrices
• Authorization Boundary Diagrams

Soft Skills

• Leadership
• Team Management
• Communication

Certifications & Qualifications

• Certified Information Security Manager (CISM)
• CompTIA Advanced Security Practitioner (CASP+)

Industry Keywords

• U.S. Citizenship
• FEMA EOD Suitability
• DHS Experience
• DoD Experience
• Cloud Security
• FedRAMP Authorization

Tools & Technologies

• CSAM
• RegScale
• EMASS
• Automated Security Tools