RMF ISSO & Security Authorization Specialist

FedTec; Baltimore (MD); On-site; USD 90,000 - 150,000; Full time

Job summary

Prudent Technology LLC seeks an Information System Security Officer (ISSO) to support SSA RMF activities, including RMF lifecycle documentation, control implementation, and evidence gathering. You will help prepare SSPs, SARs, and POA&Ms, coordinate with ISSOs and stakeholders, and contribute to continuous monitoring and remediation efforts.

Responsibilities include assisting with ATO packages, maintaining SI-2 and RA-5 reporting, and supporting semi-annual QA reviews while staying abreast of

Qualifications

• Bachelor’s degree in cybersecurity, information systems, information technology, computer science, or related field.
• 3–4 years of experience supporting federal information security programs, including NIST RMF (SP 800-37) and security control implementation (SP 800-53).
• Experience assisting with Security Control Assessments (SCAs) and producing SSPs, SARs, and POA&Ms.
• Knowledge of regulatory frameworks: FISMA, FedRAMP, OMB A-130, FIPS, HIPAA where applicable to federal systems.
• Ability to gather requirements, assess security-related requests, and communicate with ISSOs and stakeholders.
• Experience authoring or contributing to SSPs with stakeholder input and mapping to baselines.
• Familiarity with SA&A tools (ServiceNow, Xacta, eMASS) for RMF lifecycle.
• Proficiency in MS Office 365 for documentation and reporting.
• Strong written and verbal communication skills.

Responsibilities

• Assist ISSO, SAM, and DSR with RMF documentation in SSA SA&A tools, supporting Planning, Categorization, Control Selection, Implementation, Assessment, Authorization, and Monitoring.
• Support completion of Authorization to Operate (ATO) packages including SSPs and security artifacts.
• Help establish SI-2 and RA-5 reports for each security boundary in coordination with ISSO and stakeholders.
• Provide support during Targeted Control Assessments and Continuous Monitoring Assessments, gathering required evidence.
• Review SARs, understand risks, and suggest mitigating strategies.
• Coordinate POA&M remediation with technical stakeholders and ensure timely closure.
• Track and report POA&M remediation status to supervisor and ISSOs.
• Conduct semi-annual QA reviews of assigned security boundaries and report results.
• Analyze new/federal laws and directives impacting SSA information security operations.
• Assist with remediation of agency audit findings and evidence collection.
• Communicate task status, risks, and schedule changes promptly to supervision.
• Document all contractor activities in SSA reporting requirements.

Skills

RMF lifecycle

NIST SP 800-37

Security control implementation

SSP/SAR/POA&M development

FISMA/FedRAMP/HIPAA familiarity

SA&A tools

ServiceNow

Xacta

eMASS

MS Office 365

Communication skills

Education

Bachelor’s degree in cybersecurity or related field

Tools

ServiceNow

Xacta

eMASS

JIRA

Confluence

Job description

Prudent Technology LLC seeks an Information System Security Officer (ISSO) to support SSA RMF activities, including RMF lifecycle documentation, control implementation, and evidence gathering. You will help prepare SSPs, SARs, and POA&Ms, coordinate with ISSOs and stakeholders, and contribute to continuous monitoring and remediation efforts.

Responsibilities include assisting with ATO packages, maintaining SI-2 and RA-5 reporting, and supporting semi-annual QA reviews while staying abreast of