ME00672-Lead Information Security Officer (ISSO)

Momentum Engineering, Inc.; Washington; On-site; USD 120,000 - 180,000; Full time

Benefits offered by this job

Paid holidays

3 weeks PTO

Group medical plan

Dental

Vision

Life insurance

STD/LTD

Job summary

Momentum Engineering, Inc. seeks a Lead ISSO to direct RMF activities across a Federal program and support ATO efforts in a complex hybrid-cloud environment.

You will produce SSPs, POA&Ms, SARs, and related artifacts while coordinating with ISSMs, System Owners, and Authorizing Officials. Ideal candidates have 10+ years in cybersecurity, 5+ years on Federal RMF programs, and proven experience in audits, governance, and continuous monitoring, with the ability to brief senior leadership and drive

Qualifications

• U.S. Citizenship required.
• Ability to obtain and maintain a Tier 4 High-Risk Public Trust.
• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Information Systems, or related field.
• 10+ years of cybersecurity experience
• 5+ years supporting Federal RMF programs
• Experience supporting FISMA Moderate or High environments
• Experience supporting ATO and continuous authorization efforts
• Experience managing POA&Ms programs and vulnerability remediation tracking
• Experience supporting cybersecurity audits and assessment activities
• Experience developing SSPs and authorization package documentation
• Experience briefing senior leadership and governance boards

Responsibilities

• Lead execution of RMF activities across the system lifecycle
• Support ATO, reauthorization, and ongoing authorization activities
• Develop, maintain, and review System Security Plans (SSPs), POA&Ms, SARs, SAPs, and supporting authorization artifacts
• Coordinate with ISSMs, System Owners, Authorizing Officials, assessors, and program stakeholders
• Lead continuous monitoring and cybersecurity posture management activities
• Support cybersecurity governance boards, change-control activities, and security reviews
• Oversee vulnerability management reporting, remediation tracking, and POA&Ms governance
• Develop executive-level briefings, dashboards, metrics, and cybersecurity status reports
• Support audits, assessments, FISMA reviews, and compliance reporting activities
• Ensure cybersecurity artifacts remain accurate, current, auditable, and traceable
• Lead risk identification, issue management, corrective actions, and escalation activities
• Maintain audit-ready evidence repositories and documentation

Skills

RMF leadership

ATO support

POA&Ms management

Cybersecurity audits

SSP development

Executive briefing

Risk management

Governance

Vulnerability remediation

Team coordination

Education

Bachelor's degree in Cybersecurity/IT/CS/IS

Tools

ServiceNow

Splunk

Tenable

Qualys

Azure

Microsoft 365

Entra ID

Job description

Job Summary

• Seeking a highly experienced Lead Information System Security Officer (Lead ISSO) to support a Federal cybersecurity program responsible for authorization support, continuous monitoring, cybersecurity governance, audit readiness, and security compliance activities across a complex hybrid-cloud environment
• The Lead ISSO serves as the primary technical and operational cybersecurity lead responsible for coordinating Risk Management Framework (RMF) activities, supporting Authorization to Operate (ATO) efforts, maintaining cybersecurity artifacts, facilitating governance activities, and providing cybersecurity decision support to Federal stakeholders
• This position requires significant experience leading cybersecurity compliance, governance, risk management, and continuous monitoring activities within Federal environments

Primary Responsibilities

• Lead execution of RMF activities across the system lifecycle
• Support ATO, reauthorization, and ongoing authorization activities
• Develop, maintain, and review System Security Plans (SSPs), POA&Ms, SARs, SAPs, and supporting authorization artifacts
• Coordinate with ISSMs, System Owners, Authorizing Officials, assessors, and program stakeholders
• Lead continuous monitoring and cybersecurity posture management activities
• Support cybersecurity governance boards, change-control activities, and security reviews
• Oversee vulnerability management reporting, remediation tracking, and POA&M governance
• Develop executive-level briefings, dashboards, metrics, and cybersecurity status reports
• Support audits, assessments, FISMA reviews, and compliance reporting activities
• Ensure cybersecurity artifacts remain accurate, current, auditable, and traceable
• Lead risk identification, issue management, corrective actions, and escalation activities
• Maintain audit-ready evidence repositories and documentation

Required Qualifications

• U.S. Citizenship required.
• Ability to obtain and maintain a Tier 4 High-Risk Public Trust.
• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Information Systems, or related field.
• 10+ years of cybersecurity experience
• 5+ years supporting Federal RMF programs
• Experience supporting FISMA Moderate or High environments
• Experience supporting ATO and continuous authorization efforts
• Experience managing POA&Ms programs and vulnerability remediation tracking
• Experience supporting cybersecurity audits and assessment activities
• Experience developing SSPs and authorization package documentation
• Experience briefing senior leadership and governance boards

Desired Qualifications

• One or more of the following:
• • CISSP
  • CISM
  • GSLC
  • CASP+
  • Security+
  • CGRC (formerly CAP)
• Desired technical experience:
• • CSAM
  • ServiceNow
  • Splunk
  • Tenable
  • Qualys
  • Microsoft Azure
  • Microsoft 365
  • Entra ID
  • Zero Trust initiatives

Exempt hourly position. 11 paid holidays, minimum of 3 weeks PTO, company sponsored group medical plan, company paid dental, vision, life insurance, and STD/LTD plans. Salary is dependent upon the candidate's experience and qualifications.