Senior ISSO & RMF Lead - Remote NCR

onezerollc; Washington (District of Columbia); Remote; USD 120,000 - 160,000; Full time

Benefits offered by this job

Health insurance

Dental insurance

Vision insurance

Life insurance

401(k) with company matching

Paid time off

Paid holidays

Employee referral program

Educational assistance

Job summary

OneZero LLC is actively seeking an experienced SME – Information Security Analyst to lead RMF compliance for high-value systems. This role, remote within the National Capital Region, requires deep ISSO expertise, federal standards proficiency, and a final SECRET clearance.

You will oversee categorization, control selection, and authorization packages, mentor junior analysts, and coordinate with SOC and audit teams to maintain secure operations in a cloud/hybrid environment.

Qualifications

• Ten or more years in information security, incl. six+ years as ISSO or A&A lead for federal systems.
• Expert knowledge of NIST SP 800-37 Rev. 2, SP 800-53/53A Rev. 5, SP 800-60, SP 800-34, FIPS 199/200; able to author complete authorization packages.
• Experience as ISSO for High-baseline or HVA systems, or for cloud/hybrid boundaries.
• Current CISSP (or CISM, or CGRC/CAP with CISSP within 12 months).
• Active, final SECRET clearance; U.S. citizenship.
• Experience managing POA&M and authorization packages in a GRC tool.
• Excellent technical writing; able to produce government-ready artifacts with minimal editing.

Responsibilities

• Serve as ISSO of record for ~3–4 complex systems.
• Lead RMF Steps 1–3 with categorization and control selection.
• Develop and maintain the full authorization artifact set.
• Lead Security Control Review Meetings with the assessor.
• Direct system security operations contractors to obtain evidence and remediate.
• Maintain POA&M in the GRC tool with monthly updates.
• Review iPost scores and remediate findings over 30 days.
• Review vulnerability scans and address high-risk items within timelines.
• Plan annual Contingency Plan tests and Control Assessments.
• Coordinate with SOC and IR teams on incidents and update RMF artifacts.
• Mentor analysts and review artifacts for accuracy.

Skills

ISSO leadership

NIST RMF

SECRET clearance

Technical writing

GRC tools

Vulnerability management

Security governance

Education

Bachelor's degree in CS/IT/Cybersecurity

Master's degree (preferred)

Experience in lieu of degree

Tools

Tenable

Wiz

Visio

MS Word

MS Excel

Job description

OneZero LLC is actively seeking an experienced SME – Information Security Analyst to lead RMF compliance for high-value systems. This role, remote within the National Capital Region, requires deep ISSO expertise, federal standards proficiency, and a final SECRET clearance.

You will oversee categorization, control selection, and authorization packages, mentor junior analysts, and coordinate with SOC and audit teams to maintain secure operations in a cloud/hybrid environment.