Senior ISSO: RMF & Army Cybersecurity Lead

Colsa-5; Huntsville (AL); On-site; USD 110,000 - 160,000; Full time

Job summary

COLSA is seeking a Senior Information System Security Officer (ISSO) to lead RMF authorization, assessment, and continuous monitoring for Army systems. The role requires extensive experience with security documentation, control implementation, and POA&Ms, interfacing with owners, engineers, and leadership.

The ideal candidate has 10–12 years in cybersecurity, strong RMF expertise, and holds an active Secret clearance.

Qualifications

• Experience supporting RMF across all phases, including documentation, control implementation, assessment support, authorization activities, and continuous monitoring.
• Experience serving as an Army ISSO or equivalent information system security role supporting Army systems.
• Experience developing, maintaining, and reviewing RMF security documentation and authorization packages.
• Experience using ACAS, CMRS, STIGs, and vulnerability-management processes to identify, assess, and remediate cybersecurity risks.
• Ability to manage POA&Ms, track remediation progress, and support closure decisions.
• Experience supporting cybersecurity requirements for public-facing systems or externally accessible components.
• Active Secret clearance; US Citizenship required.

Responsibilities

• Develop, maintain, and update RMF documentation, including SSPs, assessment artifacts, control statements, risk assessments, continuous monitoring plans, and POA&Ms.
• Coordinate with system owners, information system security managers, engineers, administrators, and assessors to implement and validate security controls.
• Review vulnerability scan results, compliance findings, and assessment results to identify risks and remediation recommendations.
• Use ACAS, CMRS, STIGs, and related tools to assess and improve system security posture.
• Track vulnerabilities, findings, waivers, and remediation activities; manage POA&Ms through closure or risk acceptance.
• Support security of public-facing systems by identifying and mitigating risks associated with externally accessible services.
• Perform continuous monitoring activities including control reviews, vulnerability management, and configuration compliance.
• Prepare senior-level status reports, risk summaries, briefings, and recommendations for leadership.
• Provide technical guidance and mentorship to junior RMF, ISSO, and cybersecurity personnel.

Skills

Clear communication of complex risks

Independent work

Cross-functional coordination

Mentorship to juniors

Active Secret clearance

Education

Bachelor's degree in cybersecurity, information technology, computer science, information systems, engineering, or related discipline

Master's degree in cybersecurity, information technology, information systems, engineering, or related field

CISSP

CISM

CAP

Security+

Tools

ACAS

CMRS

STIGs

Vulnerability-management processes

Job description

COLSA is seeking a Senior Information System Security Officer (ISSO) to lead RMF authorization, assessment, and continuous monitoring for Army systems. The role requires extensive experience with security documentation, control implementation, and POA&Ms, interfacing with owners, engineers, and leadership.

The ideal candidate has 10–12 years in cybersecurity, strong RMF expertise, and holds an active Secret clearance.