Senior ISSO - RMF, ATO & DoD Cybersecurity

Isallc; Fort Washington (MD); On-site; USD 178,000 - 210,000; Full time

Job summary

Intelligence and Security Associates (ISA) is seeking an Information System Security Officer (ISSO) to oversee security governance and RMF lifecycles across DoD/National security programs in Fort Washington, MD. The role ensures ATO readiness, develops SSPs, and interfaces with government personnel to sustain accreditation.

The ISSO will lead vulnerability assessments, monitor POA&M resolutions, and implement STIGs, while coordinating with ISSMs, SCAs, and AOs.

Qualifications

• Minimum of 20 years of information systems security experience.
• Minimum of 8 years RMF experience in defense/national security environments.
• Minimum of 5 years in ISSO/ISSM/SCA/authorization-support roles.
• Experience drafting and maintaining SSPs, POA&Ms, SCTMs, and risk assessments.
• Strong communication with Government Accreditation personnel and leadership.

Responsibilities

• Manage RMF lifecycle to achieve and sustain ATOs.
• Draft and maintain SSPs, SCTMs, POA&Ms, and Continuous Monitoring Plans.
• Interface with Government Accreditation personnel and ISOs to fulfill requests.
• Evaluate controls against NIST SP 800-53/800-37 and STIG requirements.
• Conduct vulnerability scans, audits, and risk assessments.
• Coordinate security incident response and root-cause analyses.
• Develop SOPs and user security awareness training.

Skills

RMF lifecycle

eMASS

SSP drafting

SCTM

POA&M

NIST SP 800-53

NIST SP 800-37

STIGs

AO coordination

Education

Bachelor's degree in Cybersecurity/IT/CS

Tools

eMASS

Job description

Intelligence and Security Associates (ISA) is seeking an Information System Security Officer (ISSO) to oversee security governance and RMF lifecycles across DoD/National security programs in Fort Washington, MD. The role ensures ATO readiness, develops SSPs, and interfaces with government personnel to sustain accreditation.

The ISSO will lead vulnerability assessments, monitor POA&M resolutions, and implement STIGs, while coordinating with ISSMs, SCAs, and AOs.