Senior ISSO RMF/A&A Leader (Remote)

GovCIO; United States; Remote; USD 143,000 - 175,000; Full time

Job summary

GovCIO is hiring a Senior Information Systems Security Officer (ISSO) to lead RMF lifecycle activities, including categorization, control selection, implementation, assessment, authorization, and continuous monitoring. The role requires experience with NIST SP 800-53 Rev 5, CNSSI 1253, and emerging tech security, including AI/ML platforms.

The position is based in Washington, DC with 100% remote work eligibility, mentoring junior ISSO staff, and collaboration with system owners and leadership to

Qualifications

• Bachelor's degree with 12+ years of information system security experience OR commensurate experience
• 8–10+ years in an ISSO or cybersecurity compliance role with ISSO of record
• Experience RMF assessments across multiple network environments
• Experience managing multiple concurrent A&A assessments
• Experience developing RMF artifacts: SSPs, SARs, POA&Ms, BOE
• Experience with microservices-based or distributed architectures and security assessments
• Proficiency with GRC platforms for A&A documentation and continuous monitoring

Responsibilities

• Support and execute all phases of the RMF lifecycle across multiple systems and networks
• Develop, maintain, and update RMF documentation (SSPs, SARs, SAPs, POA&Ms, BOE)
• Conduct concurrent RMF assessments and maintain compliance docs in JCAM
• Assess and authorize emerging tech systems (AI/ML, microservices) per NIST guidance
• Manage evidence collection and traceability for assessments and audits
• Establish FIPS 199 impact levels and document PIAs/PTAs
• Review vulnerability results and manage POA&Ms to closure
• Provide security reporting, dashboards, and metrics to owners
• Ensure compliance with FISMA, NIST 800-53 Rev 5, CNSSI 1253, OMB A-130
• Manage workflow and tagging in JIRA; maintain status visibility
• Mentor ISSO staff and develop SOPs/process docs
• Collaborate with technical/non-technical to communicate security requirements

Skills

RMF lifecycle

NIST SP 800-53 Rev 5

CNSSI 1253

A&A documentation

JIRA/CSAM/JCAM

Tenable SC

SBSS/SARs/SAPs/BOE

Security+ CE

DoD 8570.01-M / 8140 IAM II/III

Public Trust clearance

Education

Bachelor's degree

Tools

JCAM/CSAM/Xacta

Job description

GovCIO is hiring a Senior Information Systems Security Officer (ISSO) to lead RMF lifecycle activities, including categorization, control selection, implementation, assessment, authorization, and continuous monitoring. The role requires experience with NIST SP 800-53 Rev 5, CNSSI 1253, and emerging tech security, including AI/ML platforms.

The position is based in Washington, DC with 100% remote work eligibility, mentoring junior ISSO staff, and collaboration with system owners and leadership to