Senior ISSO – Federal RMF, Privacy & GRC Expert

Quantum Sky; Washington (District of Columbia); On-site; USD 120,000 - 160,000; Full time

Job summary

Quantum Sky seeks a Senior Information Systems Security Officer (ISSO) to support a 1-year surge for a federal customer in Washington, DC. You will lead RMF lifecycle activities, develop security packages, and act as a trusted advisor to CORs and stakeholders while ensuring compliance with privacy and federal requirements.

The role requires strong communication skills, ownership, and the ability to drive complex security and privacy initiatives to completion in a fast-paced government

Qualifications

• 8+ years of professional experience, 5+ years supporting ISSO RMF activities.
• Bachelor’s Degree or 4 years of additional experience in lieu of a degree.
• High school diploma with 8 years of experience substituted for a Bachelor’s Degree.

Responsibilities

• Lead RMF lifecycle activities including ATO, continuous monitoring, and integration of security, privacy, and legal requirements.
• Develop and present security authorization packages and supporting documentation per NIST SP 800-53 and client requirements.
• Own security and privacy initiatives from planning to completion, driving remediation actions and ensuring timely deliverables.
• Conduct security and privacy risk assessments, analyze vulnerability findings, and support continuous monitoring across apps, infra, and databases.
• Advise CORs, system owners, stakeholders, and technical teams on security and privacy requirements clearly and professionally.
• Coordinate contingency planning, incident response, privacy, and continuity activities across the SDLC.

Skills

RMF leadership

stakeholder comms

privacy by design

documentation

Education

Bachelor's degree or 4 years experience

Tools

Nessus

Qualys

ServiceNow

FedRAMP

Job description

Quantum Sky seeks a Senior Information Systems Security Officer (ISSO) to support a 1-year surge for a federal customer in Washington, DC. You will lead RMF lifecycle activities, develop security packages, and act as a trusted advisor to CORs and stakeholders while ensuring compliance with privacy and federal requirements.

The role requires strong communication skills, ownership, and the ability to drive complex security and privacy initiatives to completion in a fast-paced government