ME00672-Lead Information Security Officer (ISSO)

Momentum Engineering; Washington (District of Columbia); On-site; USD 150,000 - 190,000; Full time

Benefits offered by this job

11 paid holidays

3 weeks PTO

Company-sponsored health plan

Dental, vision, life insurance

STD/LTD coverage

Job summary

Momentum Engineering in Washington, DC seeks a Lead ISSO to drive RMF activities, support ATO efforts, and maintain security artifacts across a large hybrid-cloud environment. You will coordinate with ISSMs, System Owners, and stakeholders to strengthen governance and continuous monitoring.

The ideal candidate has 10+ years in cybersecurity, 5+ years in Federal RMF programs, a Bachelor's degree in a related field, and the ability to obtain a Tier 4 High-Risk Public Trust.

Qualifications

• Experience leading RMF in Federal environments and supporting ATO processes.
• Proven ability to develop and maintain SSPs, POA&Ms, and security artifacts.
• Strong briefing skills with senior leadership and governance boards.

Responsibilities

• Lead RMF activities across the system lifecycle.
• Support ATO, reauthorization, and ongoing authorization efforts.
• Develop, maintain, and review SSPs, POA&Ms, SARs, SAPs.
• Coordinate with ISSMs, System Owners, and authorized officials.
• Lead continuous monitoring and posture management.
• Support governance boards, change-control, and security reviews.
• Oversee vulnerability reporting, remediation tracking, and POA&M governance.
• Develop executive dashboards and cybersecurity status reports.
• Support audits, FISMA reviews, and compliance reporting.

Skills

RMF leadership

ATO support

SSP development

POA&M tracking

Vulnerability management

Audits & assessments

Governance reporting

Executive briefings

Education

Bachelor's degree in Cybersecurity or related field

Tools

ServiceNow

Splunk

Tenable

Qualys

Microsoft 365

Zero Trust initiatives

Job description

ME00672-Lead Information Security Officer (ISSO)

Momentum Engineering Washington, District of Columbia, United States

About this position

Momentum Engineering, Inc. fosters an employee-centric culture. Our strength lies in our people. With a high percentage of employees holding advanced degrees in engineering, computer science, and related disciplines, we bring deep technical expertise to every mission. Our team includes professionals with security clearances and full-scope polygraphs, ensuring trusted, secure support for the most sensitive national security initiatives. Additionally, our workforce is equipped with industry-leading certifications, demonstrating a commitment to continuous learning and excellence. Most importantly, our exceptional employee retention rate reflects a culture of professional growth, mission focus, and dedication—ensuring long-term stability and expertise for our customers’ critical needs.

Job Summary

• Seeking a highly experienced Lead Information System Security Officer (Lead ISSO) to support a Federal cybersecurity program responsible for authorization support, continuous monitoring, cybersecurity governance, audit readiness, and security compliance activities across a complex hybrid-cloud environment
• The Lead ISSO serves as the primary technical and operational cybersecurity lead responsible for coordinating Risk Management Framework (RMF) activities, supporting Authorization to Operate (ATO) efforts, maintaining cybersecurity artifacts, facilitating governance activities, and providing cybersecurity decision support to Federal stakeholders
• This position requires significant experience leading cybersecurity compliance, governance, risk management, and continuous monitoring activities within Federal environments

Primary Responsibilities

• Lead execution of RMF activities across the system lifecycle
• Support ATO, reauthorization, and ongoing authorization activities
• Develop, maintain, and review System Security Plans (SSPs), POA&Ms, SARs, SAPs, and supporting authorization artifacts
• Coordinate with ISSMs, System Owners, Authorizing Officials, assessors, and program stakeholders
• Lead continuous monitoring and cybersecurity posture management activities
• Support cybersecurity governance boards, change-control activities, and security reviews
• Oversee vulnerability management reporting, remediation tracking, and POA&M governance
• Develop executive-level briefings, dashboards, metrics, and cybersecurity status reports
• Support audits, assessments, FISMA reviews, and compliance reporting activities
• Ensure cybersecurity artifacts remain accurate, current, auditable, and traceable
• Lead risk identification, issue management, corrective actions, and escalation activities
• Maintain audit-ready evidence repositories and documentation

Required Qualifications

• Ability to obtain and maintain a Tier 4 High-Risk Public Trust.
• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Information Systems, or related field.
• 10+ years of cybersecurity experience
• 5+ years supporting Federal RMF programs
• Experience supporting FISMA Moderate or High environments
• Experience supporting ATO and continuous authorization efforts
• Experience managing POA&M programs and vulnerability remediation tracking
• Experience supporting cybersecurity audits and assessment activities
• Experience developing SSPs and authorization package documentation
• Experience briefing senior leadership and governance boards

Desired Qualifications

• One or more of the following:
• CISSP
• CISM
• GSLC
• CASP+
• Security+
• CGRC (formerly CAP)
• Desired technical experience:
• CSAM
• ServiceNow
• Splunk
• Tenable
• Qualys
• Microsoft 365
• Zero Trust initiatives

Exempt hourly position. 11 paid holidays, minimum of 3 weeks PTO, company sponsored group medical plan, company paid dental, vision, life insurance, and STD/LTD plans. Salary is dependent upon the candidate’s experience and qualifications.