On-Site ISSO: Federal RMF & NIST Compliance

Appone; Ashburn (VA); On-site; USD 90,000 - 130,000; Full time

Job summary

Anakim Consulting is seeking Information Systems Security Officers (ISSO) to support a large federal agency in Ashburn, VA. These on-site roles focus on managing security authorization, RMF processes, and continuous compliance across systems throughout their lifecycles.

Senior and mid-level positions require experience with ATO packages, NIST standards, and security documentation; Junior roles support authorization activities and evidence collection. DHS Public Trust eligibility is required.

Qualifications

• Citizenship: U.S. citizen; no dual citizenship.
• DHS CBP suitability or eligibility for secure access.
• Availability to work on-site in Ashburn, VA.
• Education: Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or related field (equivalent experience allowed).
• Certifications: Junior – Security+, CAP/CISC, GSEC; Mid/Senior – CISSP, CISM, CAP/CISC, CISA.

Responsibilities

• Authorization and Compliance: Manage security authorization activities, maintain ATO packages, ensure compliance with federal/defense/enterprise standards (NIST SP 800-53, 800-37, FISMA, RMF).
• Documentation Management: Develop and maintain SSPs, SARs, SCTMs, and Contingency Plans.
• Vulnerability and POA&M Management: Track, remediate findings, and coordinate remediation milestones.
• Assessment Coordination: Coordinate security assessments and audits with internal and external assessors; resolve findings.
• Technical Guidance: Provide SME guidance on security policy, control implementation, and authorization strategies.

Skills

Security authorization

RMF processes

Documentation management

Vulnerability management

Stakeholder collaboration

Education

Bachelor's degree in cybersecurity

Equivalent years of related experience

Job description

Anakim Consulting is seeking Information Systems Security Officers (ISSO) to support a large federal agency in Ashburn, VA. These on-site roles focus on managing security authorization, RMF processes, and continuous compliance across systems throughout their lifecycles.

Senior and mid-level positions require experience with ATO packages, NIST standards, and security documentation; Junior roles support authorization activities and evidence collection. DHS Public Trust eligibility is required.