Senior Information System Security Officer (ISSO)

Ortman Consulting LLC; Washington (District of Columbia); Hybrid; USD 90,000 - 130,000; Full time

Job summary

Ortman Consulting LLC is seeking Senior ISSOs to support a federal agency in Washington, DC. This role involves RMF/authorization activities across FISMA-Moderate systems, continuous monitoring, vulnerability management, and POA&M tracking, with audit-ready artifacts maintained in CSAM. Hybrid work in the DC area, requiring U.S.

citizenship and Tier 4 High-Risk Public Trust eligibility. Preferred certifications include Security+, CAP/CGRC, CISSP or CISSP-track, and prior ISSO experience at a

Qualifications

• 5+ years of cybersecurity experience with hands-on RMF/ATO support.
• Experience with continuous monitoring, vulnerability management, and POA&M tracking for FISMA-Moderate systems.
• Familiarity with authorization tooling (CSAM preferred; eMASS or Xacta considered) and NIST SP 800-53/800-37.
• U.S. citizen; able to obtain and maintain a Tier 4 High‑Risk Public Trust.

Responsibilities

• Execute RMF/authorization activities across FISMA-Moderate systems.
• Maintain audit-ready security artifacts in CSAM.
• Support continuous monitoring and vulnerability management activities.

Skills

RMF/ATO support

Continuous monitoring

Vulnerability management

POA&M tracking

NIST SP 800-53/800-37

U.S. citizenship

Tools

CSAM

eMASS

Xacta

Job description

Senior Information System Security Officer (ISSO)

Ortman Consulting is hiring Senior ISSOs (2 openings) to support information system security for a federal agency in Washington, DC. You'll execute RMF/authorization activities across FISMA-Moderate systems — continuous monitoring, vulnerability and POA&M management, and maintaining audit-ready security artifacts in CSAM. Hybrid (DC area). U.S. citizenship and Tier 4 High-Risk Public Trust eligibility required.

Requirements

Minimum Qualifications:

• 5+ years of cybersecurity experience with hands-on RMF/ATO support
• Experience with continuous monitoring, vulnerability management, and POA&M tracking for FISMA-Moderate systems
• Familiarity with authorization tooling (CSAM preferred; eMASS or Xacta considered) and NIST SP 800-53/800-37
• U.S. citizen; able to obtain and maintain a Tier 4 High‑Risk Public Trust

Preferred:

• Security+, CAP/CGRC, or CISSP (or CISSP-track) certification
• Prior ISSO experience at a federal civilian agency