Senior ISSO — RMF/NIST Expert (Hybrid-DC)

Quantum Sky; Washington (District of Columbia); Hybrid; USD 120,000 - 130,000; Full time

Benefits offered by this job

Health/Dental/Vision

401(k) match

Paid Time Off

Professional development reimbursement

Job summary

Quantum Sky seeks a Senior Information System Security Officer (ISSO) to support a law enforcement client in Washington, DC. You will manage RMF/ATO lifecycles and ensure compliance with FISMA and NIST standards across systems and HVAs.

You will develop security packages, maintain POAMs, perform risk analyses, conduct security assessments, and coordinate with stakeholders on data calls. A US citizenship with Public Trust eligibility is required; hybrid work is expected with onsite presence in DC.

Qualifications

• 8+ years of professional experience with at least 5 years supporting ISSO RMF activities.
• Bachelor’s Degree or 4 years of additional experience in lieu of a degree.
• Understanding of information privacy and control technologies in electronic media.
• Strong knowledge of FISMA, NIST RMF and SPA&A processes.
• Experience with NIST publications, OMB circulars and CNSS publications.
• Proficiency in writing technical analysis reports and strong communication skills.
• Ability to work quickly, accurately in a dynamic environment.
• Good relationship management and critical thinking.

Responsibilities

• Develop and update security authorization packages per client requirements and FISMA.
• Develop and maintain POAMs and support remediation activities.
• Validate physical security measures to support system security requirements.
• Maintain an inventory of hardware and software for the information system.
• Develop, coordinate, test, and train on Contingency and Incident Response Plans.
• Perform risk analyses to determine cost-effective safeguards.
• Support Incident Response and Contingency activities.
• Perform security control assessments using NIST 800-53A.
• Conduct independent scans of application, network, and database.
• Provide continuous monitoring and governance for the system owner.
• Coordinate with stakeholders to respond to agency data calls.
• Familiar with Federal IA policies, NIST, CNSS publications.

Skills

RMF/NIST RMF

FISMA

NIST SP 800-53

Privacy controls

Threat assessment

Education

Bachelor's degree

4 years' equivalent experience

Tools

Nessus

Qualys

ServiceNow

FedRAMP

Job description

Quantum Sky seeks a Senior Information System Security Officer (ISSO) to support a law enforcement client in Washington, DC. You will manage RMF/ATO lifecycles and ensure compliance with FISMA and NIST standards across systems and HVAs.

You will develop security packages, maintain POAMs, perform risk analyses, conduct security assessments, and coordinate with stakeholders on data calls. A US citizenship with Public Trust eligibility is required; hybrid work is expected with onsite presence in DC.