Senior ISSO — RMF & Cybersecurity Leader

Gridiron IT; Fort Meade (MD); On-site; USD 110,000 - 155,000; Full time

Benefits offered by this job

Medical, dental, and vision insurance

HSA and FSA

401(k) with employer matching

Disability & ADD insurance

Life insurance

Pet insurance

Job summary

GridIron IT in the United States is seeking a Senior Cyber Specialist to serve as an Information System Security Officer (ISSO) responsible for day-to-day security posture, authorization, and continuous monitoring of enterprise information systems.

You will own security control implementation, RMF activities, and the artifacts required to obtain and sustain authorization to operate, coordinating with engineering teams and authorizing officials to translate risk into actionable improvements.

Qualifications

• Bachelor’s degree or equivalent experience with 12+ years of prior relevant experience, or Master’s degree with 10+ years of experience.
• Current IAT Level II or higher certification, such as Security+ or CISSP.

Responsibilities

• Serve as ISSO for assigned systems and be the principal cybersecurity point of contact.
• Execute RMF activities across categorization, control selection, implementation, assessment, authorization, and continuous monitoring.
• Develop, maintain, and defend authorization packages including the System Security Plan and supporting artifacts.
• Maintain system records and artifacts in eMASS or designated repository with current control status and documentation.
• Develop and track Plans of Action and Milestones (POA&Ms) with risk justification and mitigation approaches.
• Support security assessments, audits, inspections, and command cyber readiness activities.
• Partner with engineering teams to ensure security requirements are designed in from the start.
• Advise leadership on cybersecurity risk and remediation options.

Education

Bachelor’s degree or equivalent experience (12+ years)

Master’s degree with 10+ years of experience

Job description

GridIron IT in the United States is seeking a Senior Cyber Specialist to serve as an Information System Security Officer (ISSO) responsible for day-to-day security posture, authorization, and continuous monitoring of enterprise information systems.

You will own security control implementation, RMF activities, and the artifacts required to obtain and sustain authorization to operate, coordinating with engineering teams and authorizing officials to translate risk into actionable improvements.