Senior ISSO — RMF/DIACAP Expert (Remote)

CGS Federal; Arbutus (MD); Hybrid; USD 92,000 - 125,000; Full time

Job summary

CGS Federal seeks an Information Systems Security Officer (ISSO) to support DoC systems, achieving Authorization to Operate (ATO) under RMF. The role covers full life-cycle A&A management, security assessment, and RMF oversight for government systems at client sites in Washington, DC, with hybrid/remote work options in the Baltimore/ Rockville area.

The ideal candidate has 5+ years in IA/ISSE/ISSO roles, eMASS experience, and relevant certifications (e.g., CCNA Security, CySA+, GSEC).

Qualifications

• Five-plus years of IA/ISSE/ISSO/ATO experience with security documentation.
• Experience with eMASS and RMF for DoC/US government systems.
• Professional security certifications such as CCNA Security, CySA+, GICSP, GSEC, Security+ CE, SSCP, or higher.
• Strong desktop publishing skills in Word/Excel; solid writing ability.
• Ability to multi-task in a deadline-driven environment.

Responsibilities

• Review systems to identify security weaknesses and recommend improvements; document upgrades.
• Maintain responsibility for managing cybersecurity risk from an organizational perspective.
• Identify organizational risks, prioritize those risks, and maintain a risk registry for leadership.
• Provide security guidance using NIST RMF, DoC, and local security policies.
• Coordinate configuration management changes with ISSM, SCA, and AO.
• Maintain vulnerability scanning tool compliance (HBSS/ACAS) and patch management (IAVM).
• Support A&A activities, transitioning from DIACAP to RMF.
• Provide SME input for cyber security policy, assessments, and risk findings.

Skills

Security assessment

RMF/NIST

Risk management

Documentation

Cybersecurity guidance

Vulnerability management

Education

Bachelor's Degree

Tools

eMASS

HBSS

ACAS

IAVM

Job description

CGS Federal seeks an Information Systems Security Officer (ISSO) to support DoC systems, achieving Authorization to Operate (ATO) under RMF. The role covers full life-cycle A&A management, security assessment, and RMF oversight for government systems at client sites in Washington, DC, with hybrid/remote work options in the Baltimore/ Rockville area.

The ideal candidate has 5+ years in IA/ISSE/ISSO roles, eMASS experience, and relevant certifications (e.g., CCNA Security, CySA+, GSEC).