Remote RMF Security Lead — ISSO & ATO Expert

ASRC Federal; Reston, Northern (VA, KY); Hybrid; USD 110,000 - 160,000; Full time

Job summary

ASRC Federal is seeking a Senior Information System Security Officer (ISSO) to support federal cybersecurity and RMF activities for enterprise information systems.

The ISSO serves as the primary cybersecurity and privacy advisor to System Owners, ensuring security and privacy requirements are integrated throughout the system lifecycle while maintaining compliance with federal regulations and Authorization to Operate (ATO) requirements.

Qualifications

• Bachelor's degree in Cybersecurity, Information Assurance, Computer Science, Information Technology, or a related field.
• 5–7 years of experience in information assurance, cybersecurity, RMF, or related areas.
• Experience with federal cybersecurity programs and RMF.
• Experience developing RMF documentation and authorization packages.

Responsibilities

• Serve as the primary cybersecurity and privacy advisor to System Owners for assigned systems.
• Lead RMF activities, including development of SSPPs, authorization packages, and risk documentation.
• Ensure Authorization to Operate (ATO) through assessment support and continuous monitoring.
• Assess security risks, validate controls, and coordinate remediation of POA&Ms.
• Maintain system inventories, contingency plans, and privacy documentation.
• Collaborate with ISSMs, System Owners, and technical teams to integrate security lifecycle.
• Monitor security posture, review vulnerability results, and support continuous authorization.
• Provide cybersecurity guidance, policies, and security awareness training.
• Support security engineering, certification, and implementation of controls across systems.
• Identify process improvements and automation opportunities for RMF and cybersecurity operations.

Skills

RMF expertise

NIST RMF guidance

CISSP

Documentation & reporting

Stakeholder engagement

Analytical thinking

Communication skills

Education

Bachelor's degree in Cybersecurity/Info Assurance/CS/IT

Tools

GRC tools

SSPPs/POA&M development

Job description

ASRC Federal is seeking a Senior Information System Security Officer (ISSO) to support federal cybersecurity and RMF activities for enterprise information systems.

The ISSO serves as the primary cybersecurity and privacy advisor to System Owners, ensuring security and privacy requirements are integrated throughout the system lifecycle while maintaining compliance with federal regulations and Authorization to Operate (ATO) requirements.