Senior ISSO: RMF, DoD Cloud Security Lead

Resource Management Concepts, Inc.; Charleston (SC); On-site; USD 120,000 - 150,000; Full time

Job summary

Resource Management Concepts, Inc. (RMC) seeks an Information Systems Security Officer (ISSO) to support RMF authorization for mission applications, cloud infrastructure, and core services.

The ISSO collaborates with government security personnel, developers, and engineers to maintain security documentation and ensure systems meet DoD/IC requirements. The role reviews assessment results, prepares SSPs and authorization packages, and guides remediation across classification levels.

Qualifications

• Bachelor's degree in a technical or managerial field or equivalent experience.
• Active TS/SCI clearance with CI Polygraph.
• Experience with RMF, SSPs, POAMs, and ATO processes.
• Ability to review technical evidence and communicate findings clearly.
• Experience with eMASS and ACAS.
• Experience supporting DoD and IC security requirements.

Responsibilities

• Support RMF activities to obtain and maintain ATO.
• Develop and maintain SSPs, security control statements, system boundary descriptions, and supporting evidence.
• Coordinate with system owners, ISSMs, assessors, and engineering teams to prepare authorization packages and resolve findings.
• Maintain POA&Ms, track remediation progress, and communicate unresolved risks.
• Use eMASS to maintain authorization records, security control documentation, and remediation status.
• Review ACAS scan results and security testing reports and prioritize remediation.

Skills

RMF knowledge

Security risk assessment

Technical writing

Stakeholder communication

Cloud/DevSecOps security

DoD/IC security requirements

Education

Bachelor's degree in a technical or managerial field

High school diploma + 7+ years experience

Tools

eMASS

ACAS

Security documentation tooling

Job description

Resource Management Concepts, Inc. (RMC) seeks an Information Systems Security Officer (ISSO) to support RMF authorization for mission applications, cloud infrastructure, and core services.

The ISSO collaborates with government security personnel, developers, and engineers to maintain security documentation and ensure systems meet DoD/IC requirements. The role reviews assessment results, prepares SSPs and authorization packages, and guides remediation across classification levels.