Senior ISSO: RMF, FedRAMP & Audit Readiness Lead

Aderas,-Inc; Washington (District of Columbia); Hybrid; USD 120,000 - 160,000; Full time

Benefits offered by this job

Pay for Life

AD&D insurance

Short-term disability

Long-term disability

Health insurance

Job summary

Aderas is seeking an ISSO-focused professional to provide hands-on RMF support across the full system lifecycle for GSS-bound systems, including FedRAMP-authorized cloud subscriptions. You will produce audit-ready artifacts, coordinate with 3PAO teams, and maintain traceability of controls and evidence.

Responsibilities include continuous monitoring, vulnerability tracking, change coordination, incident coordination, governance integration, and audit/compliance support.

Qualifications

• ~5 years cybersecurity/RMF/GRC experience supporting enterprise systems.

Responsibilities

• Develop, update, and maintain RMF and authorization artifacts across CSAM/JCAM.
• Support 3PAO/security assessment activities by organizing evidence and preparing for reviews.
• Produce audit-ready deliverables and maintain clear traceability for controls, evidence, findings, and POA&Ms.
• Execute continuous monitoring activities and support security posture reporting.
• Coordinate vulnerability management workflows and POA&M updates.
• Coordinate Security Impact Analyses for changes and ensure RMF alignment.
• Assist with ISSO incident coordination and post-incident reporting.
• Coordinate governance integration and ensure documentation accompanies changes.
• Maintain audit-ready CSAM artifacts (SSP/SAR/POA&M) across boundaries.
• Support audit preparation and compliance reporting (FISMA, GAO, OMB FedRAMP).
• Provide non-inherently governmental recommendations and artifacts.

Education

Bachelor’s degree in IT/Cyber/related

Security certs aligned to RMF/GRC (CGRC, CISSP, CISM)

Job description

Aderas is seeking an ISSO-focused professional to provide hands-on RMF support across the full system lifecycle for GSS-bound systems, including FedRAMP-authorized cloud subscriptions. You will produce audit-ready artifacts, coordinate with 3PAO teams, and maintain traceability of controls and evidence.

Responsibilities include continuous monitoring, vulnerability tracking, change coordination, incident coordination, governance integration, and audit/compliance support.