Senior ISSO — RMF, ATO & Zero Trust Lead (TS/SCI)

ELEVI Associates, LLC; Washington (District of Columbia); On-site; USD 150,000 - 210,000; Full time

Job summary

ELEVI Associates, LLC in Washington, DC, seeks a Senior Information Systems Security Officer (ISSO) to lead cybersecurity efforts on large programs. You will perform security assessments, manage RMF/ATO activities, and ensure the program maintains NIST 800-53 controls while integrating Zero Trust principles.

Responsibilities include coordinating with ISSMs, ISSEs, system owners, and developers, maintaining SSPs and POA&Ms, and guiding security through the full project life cycle.

Qualifications

• Must hold a current TS/SCI with Poly clearance.
• Active Security+ or IAT II/III certification.
• Experience conducting assessments of IT architecture for security compliance (e.g., ICD 503).

Responsibilities

• Conduct technical security assessments and contribute to secure systems.
• Ensure system security compliance, manage risks, and support certification activities through the program life cycle.
• Collaborate with application leads, sysadmins, DBAs, developers and testers to ensure security compliance and ATO.
• Respond to ISSMs and SCAs questions to ensure secure designs.
• Develop and maintain SSPs, POA&Ms, and other security docs using XACTA.
• Drive IATT and ATO efforts with stakeholders and AO.
• Implement and validate NIST 800-53 controls in cloud-native DPaaS environments.
• Apply Zero Trust to secure data services (identity, segmentation, flow control).

Skills

TS/SCI with Poly clearance

Security+ or IAT II/III

Customer/leadership communication

Coordination with ISSMs/ISSEs

Tools

XACTA

RMF process

Splunk

Job description

ELEVI Associates, LLC in Washington, DC, seeks a Senior Information Systems Security Officer (ISSO) to lead cybersecurity efforts on large programs. You will perform security assessments, manage RMF/ATO activities, and ensure the program maintains NIST 800-53 controls while integrating Zero Trust principles.

Responsibilities include coordinating with ISSMs, ISSEs, system owners, and developers, maintaining SSPs and POA&Ms, and guiding security through the full project life cycle.