Senior ISSO - RMF & Federal Security Expert

ASSYST, Inc.; Baltimore (MD); On-site; USD 120,000 - 160,000; Full time

Job summary

ASSYST, Inc. seeks an experienced Information Systems Security Officer (ISSO) to support a Federal customer. The ISSO will ensure confidentiality, integrity, and availability of systems while aligning with RMF, FISMA, and FedRAMP requirements across government stakeholders.

The role involves incident response, system authorization support, security documentation, risk assessment, and continuous monitoring to safeguard Federal information systems in a complex regulatory environment.

Qualifications

• Bachelor's degree or equivalent experience.
• 5+ years of experience supporting Federal information security or cybersecurity programs.
• Active CISSP or CISM certification.
• Strong knowledge of FISMA, FedRAMP, NIST RMF, NIST SP 800 Series, FIPS, and OMB Circular A-130.
• Experience developing and reviewing RMF authorization documentation.
• Knowledge of IT contingency planning, continuous monitoring, and risk management.
• Familiarity with AWS, Microsoft Azure, or Google Cloud Platform.
• Excellent analytical, communication, and documentation skills.
• Ability to obtain and maintain a Public Trust clearance.

Responsibilities

• Respond to cybersecurity incidents and security events to mitigate risks and protect information systems.
• Support system authorization activities and ensure compliance with the NIST Risk Management Framework (RMF), FISMA, and FedRAMP requirements.
• Review and maintain security documentation, including SSPs, SAPs, SARs, Contingency Plans, POA&Ms, and other authorization artifacts.
• Assess security risks, analyze security assessment reports, and recommend appropriate mitigation strategies.
• Support continuous monitoring, ongoing risk assessments, and compliance activities.
• Provide cybersecurity guidance to system owners and leadership based on NIST, FIPS, and Federal security standards.
• Monitor changes to Federal cybersecurity policies, regulations, and directives.
• Support the protection of Personally Identifiable Information (PII) and Privacy Impact Assessments (PIAs).
• Evaluate the security impact of new technologies and cloud environments.

Skills

FISMA knowledge

FedRAMP knowledge

RMF knowledge

NIST SP 800 series knowledge

FIPS knowledge

OMB A-130 knowledge

Analytical skills

Communication skills

Documentation skills

Public Trust eligibility

Education

Bachelor's degree or equivalent experience

Tools

AWS

Microsoft Azure

Google Cloud Platform

Job description

ASSYST, Inc. seeks an experienced Information Systems Security Officer (ISSO) to support a Federal customer. The ISSO will ensure confidentiality, integrity, and availability of systems while aligning with RMF, FISMA, and FedRAMP requirements across government stakeholders.

The role involves incident response, system authorization support, security documentation, risk assessment, and continuous monitoring to safeguard Federal information systems in a complex regulatory environment.