Senior ISSM - RMF/ATO Compliance Lead

Amentum; Northern (KY); Hybrid; USD 100,000 - 110,000; Full time

Benefits offered by this job

Health insurance

Paid time off

401(k) matching

Educational reimbursement

Parental leave

Employee stock purchase plan

Tax-saving options

Disability and life insurance

Pet insurance

Job summary

Amentum is seeking an Information Systems Security Manager (ISSM) to lead system-level cybersecurity governance for designated enclaves. The role focuses on RMF compliance, continuous monitoring, and ATO readiness, serving as the go-to cybersecurity advisor to government officials.

You will manage SSPs, risk assessments, and POA&Ms, coordinating with AOs, SCAs, PMs, and ISO to maintain authorization status. A TS/SCI eligible candidate with DoD 8140 experience is required.

Qualifications

• Requires RMF package development experience and continuous monitoring.
• Ability to brief senior government leadership on cyber risk posture.
• Proven experience managing ATO packages in eMASS and Xacta.
• Active TS/SCI clearance with US citizenship.

Responsibilities

• Serve as ISSM for multiple contractor-managed information systems.
• Develop and maintain SSPs, risk assessments, and continuous monitoring.
• Interface with AOs and SCAs to present risk assessments and manage POA&Ms.
• Oversee vulnerability management, incident reporting, and access control governance.
• Provide guidance to ISSOs to ensure proper security control implementation.
• Support contingency ISSO activities during workforce shortfalls.
• Report conditions affecting authorization status to Government officials.
• Initiate exceptions or waivers with proper coordination.
• Ensure compliance with DoW/DoD 8140 workforce requirements.

Skills

RMF experience

Communication skills

Leadership

Attention to detail

Education

BS in IT

Master’s degree

Tools

eMASS

Xacta

ACAS

NESSUS

Job description

Amentum is seeking an Information Systems Security Manager (ISSM) to lead system-level cybersecurity governance for designated enclaves. The role focuses on RMF compliance, continuous monitoring, and ATO readiness, serving as the go-to cybersecurity advisor to government officials.

You will manage SSPs, risk assessments, and POA&Ms, coordinating with AOs, SCAs, PMs, and ISO to maintain authorization status. A TS/SCI eligible candidate with DoD 8140 experience is required.