Senior ISSO: RMF ATO & Cybersecurity Lead

CGS Federal (Contact Government Services); Chantilly (VA); On-site; USD 110,000 - 160,000; Full time

Benefits offered by this job

Health, Dental, and Vision

Life Insurance

401k

Flexible Spending Account

Paid Time Off

Job summary

CGS seeks an Information Systems Security Officer (ISSO) with RMF/DIACAP experience to support Dept. of Commerce systems and pursue an Authorization to Operate (ATO). This role, based in the Washington, DC area at the Herbert Hoover building, covers full lifecycle A&A management and RMF compliance for DoC systems.

You will lead assessment activities, write security documentation, and coordinate with ISSM, SCA, and AO to ensure continuous compliance and risk management across all systems.

Qualifications

• Bachelor’s degree in a related field.
• 5+ years as IA/ISSE/ISSO or similar with ATO packaging experience.
• Experience generating security documentation & assessment artifacts.
• eMASS experience.
• Professional security certifications (CCNA Security, CySA+, GICSP, GSEC, SSCP, or higher).
• Strong word/Excel for publishing security docs.
• Ability to multi-task in a deadline-driven environment.

Responsibilities

• Review systems to identify security weaknesses and document upgrades.
• Maintain responsibility for managing cybersecurity risk.
• Identify organizational risks and maintain a risk registry for leadership.
• Provide security guidance and RMF validation.
• Coordinate CM changes with ISSM/SCA/AO.
• Maintain vulnerability scanning tool compliance (HBSS/ACAS) and patch management (IAVM).
• Support security authorization activities and RMF transition.
• Provide SME for cyber security and trusted system technology.
• Develop risk assessment reports, include thresholds and scoring.
• Advise on mitigation strategies for risk findings.

Skills

Security risk management

RMF

NIST 800.53

Security documentation

DIACAP to RMF transition

Vulnerability scanning

Patch management

ATO package development

Security governance

Technical analysis

Research & writing

Education

Bachelor’s Degree

Tools

HBSS

ACAS

IAVM

eMASS

Job description

CGS seeks an Information Systems Security Officer (ISSO) with RMF/DIACAP experience to support Dept. of Commerce systems and pursue an Authorization to Operate (ATO). This role, based in the Washington, DC area at the Herbert Hoover building, covers full lifecycle A&A management and RMF compliance for DoC systems.

You will lead assessment activities, write security documentation, and coordinate with ISSM, SCA, and AO to ensure continuous compliance and risk management across all systems.