Senior ISSM – Federal RMF & Security Lead

LMI Consulting, LLC; Washington (District of Columbia); On-site; USD 110,000 - 180,000; Full time

Job summary

LMI seeks an Information System Security Manager (ISSM) in the Washington, DC area to lead security authorization, governance, and continuous monitoring for enterprise IT capabilities across secure facilities.

You will coordinate with system owners, engineers, security officers, and government stakeholders to ensure systems are authorized, documented, and operated per security requirements. Travel is 25–50% with immediate availability preferred.

Qualifications

• Bachelor’s degree in cybersecurity, computer science, information technology, engineering, or related field.
• 8+ years in cybersecurity, information assurance, security authorization, or RMF experience.
• Experience leading security authorization for complex enterprise, interconnected, or multi-enclave systems.
• Strong knowledge of NIST SP 800-37, NIST SP 800-53, CNSSI 1253, and federal security requirements.

Responsibilities

• Lead RMF implementation across the system lifecycle, including categorization, control selection, tailoring, implementation, assessment, authorization, and monitoring.
• Develop security authorization strategies and roadmaps for classified and unclassified systems and multi-enclave environments.
• Coordinate system security plans, evidence, POAs/Ms, assessments, authorization decisions, and monitoring artifacts.
• Interpret and apply NIST SP 800-37, SP 800-53, CNSSI 1253, and related guidance.
• Advise leadership on cyber risk, control gaps, remediation priorities, and risk acceptance.
• Integrate security requirements into architecture, engineering, acquisition, change management, testing, deployment, and operations.
• Oversee vulnerability, configuration, and compliance monitoring and prioritize remediation by impact.
• Coordinate assessors, officials, security officers, engineers, and stakeholders through reviews, audits, incidents, and milestones.
• Automate evidence collection, control validation, reporting, and POA tracking while maintaining auditability.

Skills

RMF

NIST SP 800-37

NIST SP 800-53

CNSSI 1253

Security governance

Communication

Zero-trust

Education

Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Engineering, or related field

Job description

LMI seeks an Information System Security Manager (ISSM) in the Washington, DC area to lead security authorization, governance, and continuous monitoring for enterprise IT capabilities across secure facilities.

You will coordinate with system owners, engineers, security officers, and government stakeholders to ensure systems are authorized, documented, and operated per security requirements. Travel is 25–50% with immediate availability preferred.