ME00672-Lead Information Security Officer (ISSO)

Momentum Engineering, Inc; Washington, Northern (District of Columbia, KY); Hybrid; USD 140,000 - 220,000; Full time

Benefits offered by this job

Paid holidays

PTO

Group medical plan

Dental insurance

Vision insurance

Life insurance

STD/LTD

Job summary

Momentum Engineering, Inc. is seeking a seasoned Lead ISSO to guide our federal cybersecurity program across RMF, ATO, and continuous monitoring in a complex hybrid-cloud environment.

You will coordinate with ISSMs, program stakeholders, and auditors to ensure compliant, audit-ready artifacts and secure operations. Candidates bring 10+ years in cybersecurity, 5+ years supporting Federal RMF, and experience with FISMA, SSPs, and risk management.

Qualifications

• Bachelor's degree in a related field required.
• 10+ years of cybersecurity experience.
• 5+ years supporting Federal RMF programs.
• Experience with FISMA Moderate or High environments.
• Experience supporting ATO and continuous authorization.
• Experience managing POA&M programs and vulnerability tracking.
• Experience supporting cybersecurity audits and assessments.
• Experience developing SSPs and authorization package documentation.
• Experience briefing senior leadership and governance boards.

Responsibilities

• Lead RMF activities across the system lifecycle.
• Support ATO, reauthorization, and ongoing authorization activities.
• Develop, maintain, and review SSPs, POA&Ms, SARs, SAPs, and supporting artifacts.
• Coordinate with ISSMs, System Owners, Authorizing Officials, assessors, and program stakeholders.
• Lead continuous monitoring and cybersecurity posture management activities.
• Support cybersecurity governance boards, change-control activities, and security reviews.
• Oversee vulnerability management reporting, remediation tracking, and POA&M governance.
• Develop executive-level briefings, dashboards, metrics, and cybersecurity status reports.
• Support audits, assessments, FISMA reviews, and compliance reporting activities.
• Ensure cybersecurity artifacts remain accurate, current, auditable, and traceable.
• Lead risk identification, issue management, corrective actions, and escalation activities.
• Maintain audit-ready evidence repositories and documentation.

Skills

RMF

FISMA

ATO

SSP

Vuln mgmt

Governance

Audits

Leadership

Education

Bachelor's degree in Cybersecurity/IT/CS/IS

Tools

ServiceNow

Splunk

Tenable

Qualys

Microsoft 365

Job description

ME00672-Lead Information Security Officer (ISSO)

Momentum Engineering, Inc. fosters an employee-centric culture. Our strength lies in our people. With a high percentage of employees holding advanced degrees in engineering, computer science, and related disciplines, we bring deep technical expertise to every mission. Our team includes professionals with security clearances and full-scope polygraphs, ensuring trusted, secure support for the most sensitive national security initiatives. Additionally, our workforce is equipped with industry-leading certifications, demonstrating a commitment to continuous learning and excellence. Most importantly, our exceptional employee retention rate reflects a culture of professional growth, mission focus, and dedication—ensuring long-term stability and expertise for our customers’ critical needs.

Job Summary

• Seeking a highly experienced Lead Information System Security Officer (Lead ISSO) to support a Federal cybersecurity program responsible for authorization support, continuous monitoring, cybersecurity governance, audit readiness, and security compliance activities across a complex hybrid-cloud environment
• The Lead ISSO serves as the primary technical and operational cybersecurity lead responsible for coordinating Risk Management Framework (RMF) activities, supporting Authorization to Operate (ATO) efforts, maintaining cybersecurity artifacts, facilitating governance activities, and providing cybersecurity decision support to Federal stakeholders
• This position requires significant experience leading cybersecurity compliance, governance, risk management, and continuous monitoring activities within Federal environments

Primary Responsibilities

• Lead execution of RMF activities across the system lifecycle
• Support ATO, reauthorization, and ongoing authorization activities
• Develop, maintain, and review System Security Plans (SSPs), POA&Ms, SARs, SAPs, and supporting authorization artifacts
• Coordinate with ISSMs, System Owners, Authorizing Officials, assessors, and program stakeholders
• Lead continuous monitoring and cybersecurity posture management activities
• Support cybersecurity governance boards, change-control activities, and security reviews
• Oversee vulnerability management reporting, remediation tracking, and POA&M governance
• Develop executive-level briefings, dashboards, metrics, and cybersecurity status reports
• Support audits, assessments, FISMA reviews, and compliance reporting activities
• Ensure cybersecurity artifacts remain accurate, current, auditable, and traceable
• Lead risk identification, issue management, corrective actions, and escalation activities
• Maintain audit-ready evidence repositories and documentation

Required Qualifications

• Ability to obtain and maintain a Tier 4 High-Risk Public Trust.
• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Information Systems, or related field.
• 10+ years of cybersecurity experience
• 5+ years supporting Federal RMF programs
• Experience supporting FISMA Moderate or High environments
• Experience supporting ATO and continuous authorization efforts
• Experience managing POA&M programs and vulnerability remediation tracking
• Experience supporting cybersecurity audits and assessment activities
• Experience developing SSPs and authorization package documentation
• Experience briefing senior leadership and governance boards

Desired Qualifications

• One or more of the following:
• CISSP
• CISM
• GSLC
• CASP+
• Security+
• CGRC (formerly CAP)
• Desired technical experience:
• CSAM
• ServiceNow
• Splunk
• Tenable
• Qualys
• Microsoft 365
• Zero Trust initiatives

Exempt hourly position. 11 paid holidays, minimum of 3 weeks PTO, company sponsored group medical plan, company paid dental, vision, life insurance, and STD/LTD plans. Salary is dependent upon the candidate’s experience and qualifications.