Remote ISSO: Federal RMF & Cybersecurity Specialist

Reston Consulting Group; Washington (District of Columbia); Remote; USD 100,000 - 115,000; Full time

Job summary

Reston Consulting Group Inc is seeking an Information System Security Officer (ISSO) for a remote government contract. This role supports federal environments, performing RMF execution, security compliance, and authorization activities to keep systems compliant and authorized.

You will work with engineers and admins to develop SSPs, coordinate audits, run vulnerability scans, track POA&Ms, and provide clear reports to leadership. U.S.

Qualifications

• Must be able to pass a public trust background check.
• 3–5+ years of experience in IT or cybersecurity roles, with at least 1 year supporting ISSO or security compliance functions.
• Bachelor’s degree in IT, Cybersecurity, Computer Science, Business, or related field or Associate’s with relevant experience.
• Knowledge of federal cybersecurity frameworks and compliance requirements (RMF, NIST, FISMA).

Responsibilities

• Support A&A activities to maintain system accreditation and acceptable risk levels.
• Work with engineers and admins to develop corrective action plans based on audits.
• Perform routine self-assessment audits to ensure compliance with security requirements.
• Provide tracking, coordination, and reporting for cybersecurity training compliance.

Skills

Public trust background check

IT/cybersecurity experience

RMF/NIST/FISMA knowledge

Strong written and verbalcommunication

Education

Bachelor’s degree in IT/Cybersecurity/CS/Business or related field

Associate’s degree with relevant experience or degree alternative

Tools

ACAS

Nessus

eMASS

Job description

Reston Consulting Group Inc is seeking an Information System Security Officer (ISSO) for a remote government contract. This role supports federal environments, performing RMF execution, security compliance, and authorization activities to keep systems compliant and authorized.

You will work with engineers and admins to develop SSPs, coordinate audits, run vulnerability scans, track POA&Ms, and provide clear reports to leadership. U.S.