Senior ISSO: RMF, FedRAMP & Cloud Security Lead

Nava

Washington, Northern (District of Columbia, KY)

Hybrid

USD 86,000 - 202,000

Full time

6 days ago

Be an early applicant

Application generator

Stand out for this role — generate a tailored resume and cover letter in about a minute.

Get past ATS filters

Benefits offered by this job

Medical insurance

Dental insurance

Disability insurance

Vision insurance

401k with match

Paid leave

Tuition reimbursement

Life Insurance

Job summary

AnaVation is seeking a security-focused professional to join its risk assessment program in Washington, DC. You will perform internal audits, manage accreditation boundaries, and drive SA&A efforts to obtain and maintain an Authority to Operate (ATO) for IT systems.

The role demands deep RMF/NIST knowledge, CISSP certification, and experience with FedRAMP and cloud environments. You will develop SSPs, Contingency and Incident Response plans, and liaise with stakeholders to continually improve

Qualifications

6+ years with NIST, FISMA, and Security Assessment & Authorization.
FedRAMP and Cloud experience (Azure, AWS, Oracle OCI).
In-depth RMF knowledge and ability to obtain Public Trust clearance.
CISSP certification required.

Responsibilities

Perform internal audits and build streamlined assessment processes.
Manage security of accreditation boundaries across multi-cloud and on-prem environments.
Develop, maintain, and assess SA&A packages for Authority to Operate (ATO).
Create and maintain SSPs and supporting documentation (Contingency Plans, Incident Response Plans).
Coordinate Incident Response and Contingency Plan testing and training.
Review vulnerability data and provide remediation recommendations.
Improve security posture across IT systems and applications.