Onsite DoD ISSO: RMF & Compliance Leader

Occam Solutions, Inc.; Arlington (VA); On-site; USD 85,000 - 125,000; Full time

Job summary

Occam Solutions, Inc. in Arlington, VA seeks an Information System Security Officer (ISSO) to support the DoD information systems by maintaining RMF posture, ensuring compliance with NIST standards, and coordinating with system owners and engineers.

This hands-on role focuses on RMF activities, continuous monitoring, vulnerability management, security documentation, POA&M management, and eMASS administration. Onsite 3–5 days per week with active Secret clearance required.

Qualifications

• Active Secret clearance; DoD system experience.
• 2–4 years in cybersecurity or ISSO roles.
• Working knowledge of RMF and NIST SP 800-53.
• Experience developing SSPs and POA&Ms.
• Familiarity with vulnerability management and ACAS/Tenable.
• Strong documentation and communication skills.

Responsibilities

• Maintain SSPs and RMF documentation.
• Support RMF lifecycle including categorization, controls, assessment, and authorization.
• Create and track POA&Ms.
• Maintain eMASS records.
• Review vulnerability scans (ACAS/Tenable) and remediation.
• Coordinate with system owners and engineers to resolve issues.
• Ensure audit-ready documentation throughout authorization lifecycle.

Skills

RMF knowledge

NIST SP 800-53

Documentation

Vulnerability management

Communication skills

Education

Bachelor's degree in Cybersecurity, IT, CS

DoD 8140 certification

CISSP or equivalent

Tools

ACAS/Tenable

eMASS

STIG Viewer

Job description

Occam Solutions, Inc. in Arlington, VA seeks an Information System Security Officer (ISSO) to support the DoD information systems by maintaining RMF posture, ensuring compliance with NIST standards, and coordinating with system owners and engineers.

This hands-on role focuses on RMF activities, continuous monitoring, vulnerability management, security documentation, POA&M management, and eMASS administration. Onsite 3–5 days per week with active Secret clearance required.