Remote ISSO (RMF/ATO) for Government Systems

CGS Federal; Atlanta (GA); Hybrid; USD 92,000 - 125,000; Full time

Benefits offered by this job

Health, Dental, Vision

401k

Paid Time Off

Flexible Spending Account

Job summary

CGS seeks an Information Systems Security Officer (ISSO) with RMF/DIACAP experience to lead A&A efforts for DoC systems. You will document security controls, coordinate with ISSM/SCA/AO, and manage vulnerability scans to ensure compliance across multiple sites including the Herbert Hoover building in DC and client locations in Atlanta, GA and Charlotte, NC.

The role requires five years in IA roles, eMASS experience, and relevant certifications, with a strong focus on risk management and policy

Qualifications

• Bachelor’s degree required with 5+ years IA/ISSE/ISSO experience in ATO package development.
• Experience generating security documentation, STIG/IAVA compliance, and SOPs.
• Must have eMASS experience and familiarity with RMF transition.
• Security certifications such as CCNA Security, CySA+, GICSP, GSEC, or CompTIA Security+ CE are preferred.

Responsibilities

• Lead RMF-based A&A activities and documentation for DoC systems.
• Identify security weaknesses, document upgrades, and track risk in a leadership risk registry.
• Provide security guidance using NIST RMF, DoC, and local policies.
• Coordinate CM changes with ISSM, SCA, AO; ensure vulnerability scanning compliance.

Skills

NIST RMF

Risk management

Documentation

Cybersecurity policy

Vulnerability management

Patch management

Multi-tasking

Education

Bachelor’s Degree

Tools

eMASS

HBSS/ACAS

Job description

CGS seeks an Information Systems Security Officer (ISSO) with RMF/DIACAP experience to lead A&A efforts for DoC systems. You will document security controls, coordinate with ISSM/SCA/AO, and manage vulnerability scans to ensure compliance across multiple sites including the Herbert Hoover building in DC and client locations in Atlanta, GA and Charlotte, NC.

The role requires five years in IA roles, eMASS experience, and relevant certifications, with a strong focus on risk management and policy