Senior Information Security Officer - RMF/ATO Expert

CGS Federal (Contact Government Services); Chicago (IL); On-site; USD 95,000 - 140,000; Full time

Benefits offered by this job

Health, Dental, Vision

Life Insurance

401k

FSAs

PTO

Job summary

Contact Government Services (CGS) seeks an Information Systems Security Officer (ISSO) to support Department of Commerce systems at a client site in Washington, DC. The role focuses on RMF/A&A lifecycle, risk management, and security documentation.

Ideal candidates have five years IA/ISSE experience, eMASS, and DoC RMF familiarity, with relevant security certifications and strong writing skills. CGS offers growth opportunities and a collaborative team environment.

Qualifications

• Bachelor’s degree required; five years IA/ISSO or similar experience in ATO package development.
• eMASS experience is preferred.
• Professional security certifications such as CCNA Security, CySA+, GSEC, CISSP or higher are preferred.
• Strong writing and documentation skills using standard formats.
• Ability to manage multiple tasks in a deadline-driven environment.

Responsibilities

• Identify security weaknesses in systems and document upgrades.
• Maintain organizational cybersecurity risk management and risk registry.
• Provide RMF guidance and IS validation per NIST RMF, DoC and security policies.
• Coordinate configuration management with ISSM, SCA and AO.
• Maintain vulnerability scanning tools and patch management processes.
• Support DIACAP transition to DoC RMF and assess security controls.
• Draft risk assessment reports with mitigation guidance.

Skills

Vulnerability assessment

Cyber risk management

NIST RMF guidance

Security documentation

Stakeholder communication

Patch management

Configuration management

Threat modeling

Education

Bachelor's Degree

Master's Degree in Cybersecurity

Tools

eMASS

HBSS

ACAS

IAVM

Microsoft Word

Microsoft Excel

Job description

Contact Government Services (CGS) seeks an Information Systems Security Officer (ISSO) to support Department of Commerce systems at a client site in Washington, DC. The role focuses on RMF/A&A lifecycle, risk management, and security documentation.

Ideal candidates have five years IA/ISSE experience, eMASS, and DoC RMF familiarity, with relevant security certifications and strong writing skills. CGS offers growth opportunities and a collaborative team environment.