RMF ISSO: InfoSec Risk & Authorization Leader

Colsa-5; Albany (GA); On-site; USD 110,000 - 150,000; Full time

Job summary

COLSA is seeking an experienced RMF ISSO to support DoD RMF activities, develop A&A packages, and guide system owners through RMF steps. The role requires collaboration with ISSMs, validators, and stakeholders to maintain security posture.

The position emphasizes developing SSPs, SARs, and POA&Ms, conducting initial assessments, and managing vulnerabilities. On-site Albany, GA, full-time with secret clearance expectations.

Qualifications

• Eight+ years of related DoD RMF/A&A experience.
• Experience developing and maintaining RMF packages (SSPs, SARs, POA&Ms).
• Experience with security control implementation, vulnerability management, and STIGs.
• Clear and effective communication of technical findings.
• Active Secret clearance; US citizenship required.

Responsibilities

• Complete RMF authorization and assessment packages within 120 days of ATO expiration.
• Guide information owners through RMF steps 0–2 and select security controls.
• Develop SSPs, SARs, and POA&Ms with stakeholders and validators.
• Lead initial control assessments and document findings in SAR.
• Create and maintain POA&Ms, updating monthly with new scans and STIGs.
• Monitor networks to detect security incidents and deviations from policy.
• Perform audits and evaluations to ensure policy compliance.

Skills

RMF process knowledge

SSP development

Security assessment reports

POA&M management

Vulnerability management

Clearance communication

Education

Bachelor’s Degree in Cybersecurity/IT or related field

Tools

Compliance and Authorization Support Tool

Job description

COLSA is seeking an experienced RMF ISSO to support DoD RMF activities, develop A&A packages, and guide system owners through RMF steps. The role requires collaboration with ISSMs, validators, and stakeholders to maintain security posture.

The position emphasizes developing SSPs, SARs, and POA&Ms, conducting initial assessments, and managing vulnerabilities. On-site Albany, GA, full-time with secret clearance expectations.