Senior ISSO RMF & ATO Expert

CGS Federal (Contact Government Services); Rockville (MD); On-site; USD 110,000 - 160,000; Full time

Benefits offered by this job

Health insurance

Life insurance

401k

Flexible Spending Account (FSA)

Paid Time Off

Job summary

CGS is seeking an Information Systems Security Officer (ISSO) to support DoC systems and achieve Authority to Operate (ATO). The role covers full lifecycle RMF through all six steps, conducting security assessments and oversight per NIST 800.53 guidelines.

Located at the client site in the Herbert Hoover building, Washington, DC, the ideal candidate will drive A&A activities, manage risk, and provide expert technical security guidance across policies, procedures, and incident response.

Qualifications

• Bachelor’s Degree
• 5+ years experience as IA Analyst/ISSE/ISSO in ATO package development
• eMASS experience
• Professional security certifications such as CCNA Security, CySA+, GICSP, GSEC, CompTIA Security+ CE, SSCP, or higher
• Strong desktop publishing skills using Microsoft Word and Excel
• Ability to multi-task in a deadline-oriented environment

Responsibilities

• Review systems to identify potential security weaknesses and recommend improvements
• Maintain responsibility for managing cybersecurity risk from an organizational perspective
• Identify organizational risks, prioritize those risks, and maintain a risk registry for senior leadership
• Provide security guidance and RMF validation using NIST RMF, DoC policies
• Provide CM recommendations and coordinate changes with ISSM/SCA/AO
• Maintain vulnerability scanning tool compliance (HBSS/ACAS) and patch management
• Support security authorization activities and transition from DIACAP to DoC RMF
• Provide SME guidance for cyber security policy, assessments, and risk mitigation

Education

Bachelor's Degree

Tools

HBSS

ACAS

eMASS

Job description

CGS is seeking an Information Systems Security Officer (ISSO) to support DoC systems and achieve Authority to Operate (ATO). The role covers full lifecycle RMF through all six steps, conducting security assessments and oversight per NIST 800.53 guidelines.

Located at the client site in the Herbert Hoover building, Washington, DC, the ideal candidate will drive A&A activities, manage risk, and provide expert technical security guidance across policies, procedures, and incident response.