Lead Senior Information System Security Officer (ISSO) - DFC

Technology, Automation, and Management, Inc.; Washington (District of Columbia); On-site; USD 150,000 - 190,000; Full time

Job summary

Technology, Automation, and Management, Inc. seeks an executive-level cybersecurity lead to provide oversight across the enterprise.

You will ensure continuous ISSO coverage for FISMA Moderate systems within the GSS boundary, and drive adherence to RMF processes across multiple program components. Key responsibilities include engaging with stakeholders, managing a portfolio of ~6 systems, and steering governance forums.

Responsibilities

• Provide executive-level cybersecurity oversight and ensure continuous ISSO coverage across the enterprise.
• Manage a portfolio of approximately six systems and execute the full RMF lifecycle cradle-to-grave.
• Participate in enterprise governance forums, including weekly ERB, CCB, and CAB meetings.
• Conduct milestone gate reviews and deliverable QA across 32 enterprise systems to catch deficiencies before submission.
• Maintain the program's risk/issue register and oversee ISCM strategy.

Job description

Job Description

Job Description

PENDING CONTRACT AWARDMission Objectives:

Provide executive-level cybersecurity oversight, ensure continuous ISSO coverage across the enterprise, and ensure compliance for all assigned FISMA Moderate systems within the Enterprise General Support System (GSS) authorization boundary.Position Responsibility Summary:

Specific Responsibilities:

• Responsibility 1: Serve as the primary interface with DFC stakeholders and lead the contract's cybersecurity execution.
• Responsibility 2: Manage a dedicated portfolio of approximately six systems, executing the full Risk Management Framework (RMF) lifecycle cradle-to-grave.
• Responsibility 3: Participate in enterprise governance forums, including weekly ERB, CCB, and CAB meetings.
• Responsibility 4: Conduct milestone gate reviews and deliverable QA across all 32 enterprise systems to ensure deficiencies are caught prior to submission.
• Responsibility 5: Maintain the program's risk/issue register and oversee the Information Security Continuous Monitoring (ISCM) strategy.