RMF ISSO: Security Controls & Authorization Lead

Colsa; Albany, Northern (GA, KY); Hybrid; USD 110,000 - 160,000; Full time

Job summary

COLSA is seeking an experienced RMF Information System Security Officer (ISSO) to lead RMF activities across A&A packages, SSP development, and security control assessments. The ISSO will guide information owners through RMF steps and coordinate with ISSMs, validators, and stakeholders to maintain system security posture.

The role emphasizes developing and maintaining RMF artifacts, responding to findings in SARs, and managing POA&Ms while ensuring timely authorization actions and risk

Qualifications

• Bachelor’s Degree in Cybersecurity, IT, or related field or equivalent experience.
• 8+ years of DoD RMF/A&A experience.
• Experience developing RMF packages including SSPs, SARs, and POA&Ms.
• Experience with security control implementation, vulnerability management, and STIGs.
• Ability to clearly present and communicate technical approaches and findings.
• Active Secret security clearance; US Citizenship required.

Responsibilities

• Prepare and complete RMF authorization and assessment packages within 120 days of ATO expiration.
• Inform stakeholders of risk, status, and roles throughout the RMF process.
• Guide information owners through RMF steps including System Registration, Categorization, control selection and overlays.
• Provide exports of security controls and overlays for Implementation Details.
• Develop SSPs and coordinate with validators and ISSMs for SAR findings.
• Develop and maintain POA&Ms and update them monthly.
• Monitor networks for security incidents and deviations from configurations.
• Lead audits and compliance evaluations and guide remediation actions.

Skills

RMF/A&A expertise

System Security Plans (SSP)

Vulnerability management

Excellent communication skills

Active Secret clearance

Education

Bachelor’s degree in Cybersecurity/IT or related field

Job description

COLSA is seeking an experienced RMF Information System Security Officer (ISSO) to lead RMF activities across A&A packages, SSP development, and security control assessments. The ISSO will guide information owners through RMF steps and coordinate with ISSMs, validators, and stakeholders to maintain system security posture.

The role emphasizes developing and maintaining RMF artifacts, responding to findings in SARs, and managing POA&Ms while ensuring timely authorization actions and risk