Senior ISSO — RMF, FedRAMP & Cloud Security Lead

AnaVation LLC; Washington (District of Columbia); On-site; USD 120,000 - 190,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

401k with company match

Paid leave

Job summary

AnaVation is seeking a seasoned security professional to join our risk assessment team in Washington, DC. You will contribute to internal audits, streamline assessment processes, and enforce security controls across multi-cloud and on-prem environments.

The role requires deep RMF and NIST expertise, a CISSP, and the ability to prepare SA&A packages, SSPs, and contingency plans while coordinating with stakeholders and ensuring continuous monitoring and ATO readiness.

Qualifications

• 6+ years’ experience with NIST, FISMA, and Security Assessment & Authorization.
• FedRAMP and Cloud experience (e.g., Azure, AWS, Oracle (OCI)).
• Knowledgeable on various security-related NIST publications (e.g., SP 800-53r5, SP 800-53A, SP 800-18r1).
• In-depth knowledge of the Risk Management Framework (RMF).
• Ability to obtain and maintain a customer Public Trust clearance; sponsorship possible.
• CISSP certification required.

Responsibilities

• Support agency’s risk assessment program and internal audits.
• Maintain security of accreditation boundary and manage system's authorization status.
• Evaluate enterprise governance and risk across multi-cloud and on-premise environments.
• Recommend changes to improve security posture of agency systems.
• Provide security compliance support and audit liaison activities.
• Develop, maintain SA&A packages resulting in an ATO for IT systems.
• Create SSPs and supporting documentation (e.g., Contingency Plans, Incident Response Plans).
• Coordinate Incident Response Plans and Contingency Plans; train personnel.
• Ensure information systems are accredited and continuously monitored.
• Perform risk assessments for cloud and on-prem systems; review vulnerability data and remediation.
• Maintain and track POA&Ms; lead process improvements.

Skills

NIST RMF knowledge

CISSP

Security assessment & authorization

FedRAMP & cloud experience

Strong written communication

C-level presentation

PowerBI / data analysis

Tools

JCAM (CSAM) / eMASS

Nessus

BigFix

SCCM

ePO

PowerBI

Excel

Job description

AnaVation is seeking a seasoned security professional to join our risk assessment team in Washington, DC. You will contribute to internal audits, streamline assessment processes, and enforce security controls across multi-cloud and on-prem environments.

The role requires deep RMF and NIST expertise, a CISSP, and the ability to prepare SA&A packages, SSPs, and contingency plans while coordinating with stakeholders and ensuring continuous monitoring and ATO readiness.