Senior ISSO — Remote RMF & NIST Expert

GovCIO; Helena (MT); Remote; USD 120,000 - 170,000; Full time

Benefits offered by this job

Fully remote

Job summary

GovCIO is seeking a Senior Information Systems Security Officer (ISSO) to lead Assessment and Authorization activities under the RMF across multiple systems, including emerging AI/ML platforms.

You will develop and maintain RMF artifacts, supervise junior ISSO staff, and ensure compliance with NIST SP 800-53 Rev 5, CNSSI 1253, and applicable client cybersecurity policies. This role emphasizes strong mentorship and security leadership.

Qualifications

• Experience with RMF lifecycle activities for multiple systems.
• Knowledge of NIST SP 800-53 Rev 5 and CNSSI 1253 guidance.
• Ability to mentor junior ISSO staff and lead security teams.
• Proven ability to develop and maintain security documents such as SSPs, SARs, and SAPs.

Responsibilities

• Support and execute all phases of the RMF lifecycle across concurrent systems and networks.
• Develop and maintain RMF artifacts (SSPs, SARs, SAPs, POA&Ms, Contingency Plans).
• Conduct multiple concurrent RMF assessments and manage evidence collection and BOEs.
• Assess and authorize emerging tech systems including AI/ML platforms; adapt control baselines as needed.
• Review vulnerability results, manage POA&M remediation, and ensure scan completeness.
• Provide security reporting, dashboards, and status updates to system owners and stakeholders.
• Ensure compliance with FISMA, NIST SP 800-53 Rev 5, CNSSI 1253, and client policies.
• Manage workflow using JIRA and maintain visibility across assessment pipelines.
• Mentor ISSO staff and develop SOPs to improve team processes.

Skills

RMF lifecycle

A&A processes

Mentorship

Security reporting

Tools

JIRA

Tenable Security Center

Job description

GovCIO is seeking a Senior Information Systems Security Officer (ISSO) to lead Assessment and Authorization activities under the RMF across multiple systems, including emerging AI/ML platforms.

You will develop and maintain RMF artifacts, supervise junior ISSO staff, and ensure compliance with NIST SP 800-53 Rev 5, CNSSI 1253, and applicable client cybersecurity policies. This role emphasizes strong mentorship and security leadership.