Senior ISSO — RMF & A&A Expert (Remote)

GovCIO; Topeka (KS); Remote; USD 143,000 - 175,000; Full time

Benefits offered by this job

Employee Assistance Program (EAP)

Corporate Discounts

Learning & Development platform

Training, Education and Certification

Referral Bonus Program

Internal Mobility Program

Pet Insurance

Flexible Work Environment

Job summary

GovCIO is hiring a Senior Information Systems Security Officer (ISSO) to lead RMF activities across multiple systems, including emerging AI/ML platforms. The role requires expertise in NIST SP 800-53 Rev 5, CNSSI 1253, and DoD IAM guidelines, with mentorship duties for junior ISSO staff.

The position offers 100% remote work with a base in Washington, DC. You will drive assessment documentation, vulnerability management, and security metrics for government clients.

Qualifications

• Bachelor's degree or commensurate information security experience.
• 8–10+ years in ISSO or cybersecurity compliance roles.
• Experience conducting RMF assessments across multiple networks.
• Experience managing multiple concurrent A&A assessments.
• Experience developing RMF artifacts: SSPs, SARs, POA&Ms, RAR, BOE.
• Experience with microservices-based or distributed architectures and security assessments.
• Proficiency with GRC platforms for A&A and continuous monitoring (JCAM/CSAM, Xacta).
• Active CompTIA Security+ CE
• DoD 8570.01-M / DoD 8140 IAM II or III (CISSP, CISM, CASP+ or equivalent).
• Must maintain a Public Trust clearance.

Responsibilities

• Support RMF lifecycle across multiple systems and networks.
• Develop and maintain RMF artifacts: SSPs, SARs, SAPs, POA&Ms, and related docs.
• Conduct concurrent RMF assessments and track in JCAM.
• Assess and authorize emerging tech including AI/ML platforms and microservices.
• Manage evidence collection and Body of Evidence packages.
• Determine system impact levels per FIPS 199; perform PIAs and PTAs.
• Review vulnerabilities and drive POA&M remediation to closure.
• Provide security metrics and dashboards for stakeholders.
• Ensure compliance with FISMA, NIST SP 800-53 Rev 5, CNSSI 1253, and policies.
• Coordinate with stakeholders and mentor ISSO staff.
• Collaborate with tech and non-technical to communicate security requirements.

Skills

RMF assessments

A&A coordination

NIST SP 800-53 Rev 5

JIRA/CSAM/JCAM/Xacta

Public Trust clearance

Security+ CE

DoD 8570/8140 IAM II/III

Microservices security

BOE documentation

DoD 8570-M compliance

Education

Bachelor's degree

Tools

Xacta

JCAM/CSAM

Job description

GovCIO is hiring a Senior Information Systems Security Officer (ISSO) to lead RMF activities across multiple systems, including emerging AI/ML platforms. The role requires expertise in NIST SP 800-53 Rev 5, CNSSI 1253, and DoD IAM guidelines, with mentorship duties for junior ISSO staff.

The position offers 100% remote work with a base in Washington, DC. You will drive assessment documentation, vulnerability management, and security metrics for government clients.