Remote ISSO — RMF/ATO Expert

CGS Federal (Contact Government Services); Atlanta (GA); Hybrid; USD 92,000 - 125,000; Full time

Benefits offered by this job

Health insurance

401k

Flexible Spending Account

Paid Time Off

Job summary

CGS Federal (Contact Government Services) seeks an Information Systems Security Officer (ISSO) to support RMF-based ATO efforts for DoC systems. The role is hybrid, based in Washington, DC, with remote/Atlanta options, and requires experience with RMF, DIACAP transition, and security documentation development.

You will lead security assessment activities, coordinate with ISSM/SCA/AO, and ensure compliance with NIST SP 800-53 and DoC security policies.

Qualifications

• Bachelor’s Degree required.
• Minimum five years in IA/ISSE/ISSO or similar role.
• Experience generating security documentation for ATO packages.
• Experience with eMASS is preferred.
• Strong writing and reporting skills.
• Ability to multi-task in a deadline-driven environment.

Responsibilities

• Review systems to identify security weaknesses and document upgrades.
• Maintain responsibility for managing cybersecurity risk.
• Identify risks, prioritize, and maintain a risk registry for leadership.
• Provide security guidance using NIST RMF, DoC, and local policies.
• Coordinate changes with ISSM, SCA, and AO; advise on CM changes.
• Maintain vulnerability scanning tool compliance (HBSS/ACAS) and patch mgmt.
• Support DIACAP to RMF transition for DoC systems.
• Provide SME expertise on cyber security and trusted systems.
• Develop and finalize cyber security policy, assessment and authorization reports.
• Write risk assessment reports with thresholds and scoring.
• Offer mitigation guidance for cyber risk findings.

Skills

RMF assessment

NIST SP 800-53

Security documentation

DIACAP RMF transition

HBSS/ACAS management

ATO package development

Risk management

Technical writing

Education

Bachelor’s Degree

Tools

eMASS

HBSS

ACAS

Job description

CGS Federal (Contact Government Services) seeks an Information Systems Security Officer (ISSO) to support RMF-based ATO efforts for DoC systems. The role is hybrid, based in Washington, DC, with remote/Atlanta options, and requires experience with RMF, DIACAP transition, and security documentation development.

You will lead security assessment activities, coordinate with ISSM/SCA/AO, and ensure compliance with NIST SP 800-53 and DoC security policies.