RMF ISSO Lead — On‑Site (TS/SCI) NORAD/NORTHCOM

SAIC; Colorado Springs (CO); On-site; USD 80,000 - 120,000; Full time

Job summary

SAIC seeks a Risk Management Framework (RMF) Analyst/ISSO to support NORAD/NORTHCOM IT services onsite in Colorado Springs. You will own RMF lifecycle artifacts, coordinate ATO sustainment, and drive continuous monitoring while ensuring controls align with DoD directives and NIST SP 800-53 standards.

You will develop and maintain SSPs, manage POA&Ms, and interact with system owners and engineers to maintain a robust security posture in a high-tempo environment.

Qualifications

• Active TS/SCI security clearance required.
• Bachelor’s degree in information assurance, cybersecurity, or related field; or 7–10 years of relevant experience with no degree.
• 2+ years as ISSO or cybersecurity practitioner on DoD systems.
• Certification per DoD 8140.03 at Intermediate level (e.g., Security+).

Responsibilities

• Support and execute RMF lifecycle across enterprise systems and enclaves; maintain registrations, baselines, and evidentiary records in eMASS.
• Drive continuous monitoring and ATO sustainment with ISSO ownership.
• Ensure DoD/NIST controls (800-53) are implemented and audit-ready.
• Develop, validate, and maintain System Security Plans (SSPs).
• Lead POA&Ms management and coordinate closure with stakeholders.
• Collaborate with system admins and leadership to remediate findings.

Skills

Security clearance TS/SCI

Autonomy

Cross-functional teamwork

Education

Bachelor’s degree in information assurance / cybersecurity

High school diploma with 7–10 years of experience

Tools

STIG Viewer

eMASS

POA&Ms management

Job description

SAIC seeks a Risk Management Framework (RMF) Analyst/ISSO to support NORAD/NORTHCOM IT services onsite in Colorado Springs. You will own RMF lifecycle artifacts, coordinate ATO sustainment, and drive continuous monitoring while ensuring controls align with DoD directives and NIST SP 800-53 standards.

You will develop and maintain SSPs, manage POA&Ms, and interact with system owners and engineers to maintain a robust security posture in a high-tempo environment.