Senior ISSM — DoD RMF & Security Authorization Lead

JFL Consulting LLC; Springfield (VA); On-site; USD 155,000 - 175,000; Full time

Benefits offered by this job

Salary 155k-175k

Medical/dental/vision premiums

FSA accounts

Life insurance

401(k) with vesting

Generous PTO

Certification reimbursement

Job summary

JFL Consulting LLC is seeking an Information System Security Manager (ISSM) in Springfield, VA to lead RMF across DoD networks, advise leadership, and manage security packages (SSPs, SARs, POA&Ms) using eMASS/Xacta. The role drives continuous monitoring, vulnerability management, and incident response in a DoD-focused environment.

The candidate will supervise ISSOs/ISSEs, ensure compliance with DoDI 8500.01/8510.01 and NIST SP 800-53, and coordinate training and SOP updates for secure operations.

Qualifications

• Bachelor’s degree in cybersecurity, information technology, computer science, or related field.
• Active DoD Top Secret/SCI clearance is required.
• DoD IAM Level III or Level II baseline certification at hire (CISSP/CISM/CISA/GSLC).

Responsibilities

• Lead RMF governance and lifecycle activities across all networks and systems.
• Advise Authorizing Officials and program leadership on cybersecurity posture.
• Direct security package development in eMASS/Xacta including SSPs, SARs, POA&Ms, SCTMs.
• Oversee continuous monitoring, vulnerability management, and incident response.
• Coordinate SOP reviews, supervise ISSOs/ISSEs, and maintain compliance training.

Education

Bachelor’s degree in Cybersecurity/IT/CS

IAM Level III certification

Tools

eMASS

Xacta

ACAS/Nessus

SCAP

STIGs

Job description

JFL Consulting LLC is seeking an Information System Security Manager (ISSM) in Springfield, VA to lead RMF across DoD networks, advise leadership, and manage security packages (SSPs, SARs, POA&Ms) using eMASS/Xacta. The role drives continuous monitoring, vulnerability management, and incident response in a DoD-focused environment.

The candidate will supervise ISSOs/ISSEs, ensure compliance with DoDI 8500.01/8510.01 and NIST SP 800-53, and coordinate training and SOP updates for secure operations.