Senior ISSO — RMF/NIST Compliance Lead (On-Site)

SAIC; Newington (VA); On-site; USD 80,000 - 120,000; Full time

Job summary

SAIC is seeking a Senior Information Systems Security Officer (ISSO) to support cybersecurity and compliance for mission-critical IT systems. The ISSO will implement, manage, and assess security controls to ensure compliance with government regulations, including NIST 800-53 and RMF.

The role requires on-site work in Springfield, VA, with responsibilities spanning SSP/POA&Ms, ATO, risk assessment, vulnerability management, incident response, and security training for users and teams.

Qualifications

• Bachelor's degree required in a related field.
• 2-5 years of professional experience managing enterprise IT environments.
• Strong understanding of NIST RMF, 800-53, and related DoD policies.
• Experience developing SSPs and POA&Ms for compliance/audit purposes.
• Proficiency with vulnerability scanners and security analysis platforms.

Responsibilities

• Develop, maintain, and assess RMF artifacts (SSPs, POA&Ms) for RMF compliance.
• Implement and validate security controls per NIST 800-53 and overlays.
• Support ATO processes and maintain Authority to Operate status.
• Conduct risk assessments and vulnerability analyses with actionable mitigations.
• Perform system hardening using DISA STIGs and CIS Benchmarks.
• Monitor systems with Splunk/SolarWinds/ACAS for real-time threat detection.

Skills

RMF (Risk Management Framework)

NIST 800-53

Vulnerability assessment

Security controls implementation

Disaster recovery / Incident response

Splunk / SIEM monitoring

Windows Server security

Networking fundamentals

Documentation & reporting

Education

Bachelor’s Degree in Cybersecurity, Computer Science, IT, or related field

Tools

Nessus

ACAS

Qualys

DISA STIGs

Job description

SAIC is seeking a Senior Information Systems Security Officer (ISSO) to support cybersecurity and compliance for mission-critical IT systems. The ISSO will implement, manage, and assess security controls to ensure compliance with government regulations, including NIST 800-53 and RMF.

The role requires on-site work in Springfield, VA, with responsibilities spanning SSP/POA&Ms, ATO, risk assessment, vulnerability management, incident response, and security training for users and teams.