Senior ISSM: RMF & ATO Compliance Leader

Amentum; Sumter (SC); On-site; USD 100,000 - 110,000; Full time

Benefits offered by this job

Health insurance

401(k) matching

Paid time off

Educational reimbursement

Parental leave

Employee stock purchase plan

Disability and life insurance

Pet insurance

Job summary

Amentum seeks an Information Systems Security Manager to lead the security posture of contractor-managed information systems within the 25th Attack Group. You will own RMF packages, develop SSPs, and coordinate with AOs/SCAs to secure and renew ATOs, while guiding ISSOs in implementing controls across enclaves.

The role emphasizes system-level governance, continuous monitoring, and compliance with DoDI 8510.01, AFI 17-101, and related standards, with a focus on ensuring mission-aligned

Qualifications

• BS degree in Information Technology, Cybersecurity, Data Science, Information Systems, Computer Science, or equivalent from ABET/CAE institution.
• Active TS/SCI eligibility and US Citizenship required.
• Active DoD 8140 / DoDI 8570.01-M IAM Level II or III certification matching ISSM responsibilities.
• Minimum 3–5 years in RMF package development, continuous monitoring, and ISSM/lead ISSO roles.

Responsibilities

• Serve as ISSM for up to four contractor-managed information systems, overseeing RMF compliance and ATO processes.
• Develop and maintain System Security Plans (SSPs), risk assessments, and continuous monitoring plans.
• Interface with Government AOs and SCAs to present risk assessments and manage POA&Ms and ATO renewals.
• Oversee vulnerability management, incident reporting, access control governance, and configuration management.
• Provide guidance to ISSOs to ensure security control implementation aligns with baselines and mission needs.
• Provide contingency continuity support for tactical enclave cybersecurity as needed.
• Report changes affecting authorization status to Government leadership.
• Initiate exceptions or waivers to cybersecurity requirements with proper documentation.

Skills

RMF package development

Continuous monitoring

ISSM responsibilities

eMASS

Xacta

POAMs

Vulnerability management

Configuration management

Senior government leadership briefing

DoD 8140 knowledge

TS/SCI eligibility

Education

ABET-accredited or CAE-designated degree in IT/Cybersecurity/Info Systems

Master's degree in Cybersecurity (preferred)

Tools

eMASS

Xacta

STIGs/SCAP

ACAS/Nessus

IAM Level II/III Certification

Job description

Amentum seeks an Information Systems Security Manager to lead the security posture of contractor-managed information systems within the 25th Attack Group. You will own RMF packages, develop SSPs, and coordinate with AOs/SCAs to secure and renew ATOs, while guiding ISSOs in implementing controls across enclaves.

The role emphasizes system-level governance, continuous monitoring, and compliance with DoDI 8510.01, AFI 17-101, and related standards, with a focus on ensuring mission-aligned