Remote Senior ISSO: RMF & A&A Lead

GovCIO; Annapolis (MD); À distance; USD 120 000 - 180 000; Plein temps

Résumé du poste

GovCIO is seeking a Senior Information Systems Security Officer (ISSO) to lead RMF activities for complex systems, including emerging AI/ML platforms. The role focuses on A&A, NIST SP 800-53 Rev 5, and CNSSI 1253 across multiple environments, with mentorship to junior ISSO staff.

This position is based in Washington, DC and offers fully remote work. You will develop SSPs, SARs, SAPs, and POA&Ms, coordinate with system owners, and track remediation through JIRA, Tenable, and other tools.

Responsabilités

• Support and execute all phases of the NIST SP 800-37 RMF lifecycle including categorization, control selection, implementation, assessment, authorization, and continuous monitoring across multiple concurrent systems and network environments
• Develop, maintain, and update RMF documentation including System Security Plans (SSPs), Security Assessment Reports (SARs), Security Assessment Plans (SAPs), POA&Ms, Contingency Plans, Incident Response Plans, Risk Assessment documentation, and interconnection agreements
• Conduct multiple concurrent RMF assessments simultaneously, maintaining compliance documentation in JCAM
• Assess and authorize emerging technology systems - including AI/ML platforms - adapting NIST SP 800-53 Rev 5 control baselines to novel system types where standard guidance requires augmentation
• Manage evidence collection, control traceability documentation, and Body of Evidence (BOE) packages for assessments, audits, and compliance reviews
• Establish system impact levels following FIPS 199 for confidentiality, integrity, and availability; conduct and document Privacy Impact Assessments (PIAs) and Privacy Threshold Analyses (PTAs)
• Review and analyze vulnerability results using Tenable Security Center; create, track, and manage POA&M remediation activities through closure; validate scan completeness before Security Control Assessor review
• Provide security reporting, dashboards, and status updates to system owners and stakeholders; support development and maintenance of security metrics and scorecard reporting
• Ensure systems comply with FISMA, NIST SP 800-53 Rev 5, CNSSI 1253, OMB A-130, and applicable client cybersecurity policies
• Manage assessment workflow and task tracking using JIRA; maintain accurate status visibility across multiple concurrent assessment pipelines
• Mentor junior ISSO staff; develop SOPs, work instructions, and process documentation to improve team

Connaissances

RMF lifecycle

A&A processes

Mentorship

Security metrics

NIST SP 800-53 Rev 5

Outils

Tenable Security Center

JIRA

Description du poste

GovCIO is seeking a Senior Information Systems Security Officer (ISSO) to lead RMF activities for complex systems, including emerging AI/ML platforms. The role focuses on A&A, NIST SP 800-53 Rev 5, and CNSSI 1253 across multiple environments, with mentorship to junior ISSO staff.

This position is based in Washington, DC and offers fully remote work. You will develop SSPs, SARs, SAPs, and POA&Ms, coordinate with system owners, and track remediation through JIRA, Tenable, and other tools.