Senior ISSO - RMF & Policy Leader (TS/SCI)

Alex-alternative Experts, Inc; Fort Meade (MD); On-site; USD 205,000 - 220,000; Full time

Job summary

ALEX is seeking a highly experienced Senior ISSO-S to lead the development, implementation, and oversight of cybersecurity policies for complex, classified systems at Fort Meade. The role ensures regulatory compliance, risk management, and lifecycle support from design through decommissioning.

Responsibilities include maintaining SSPs, achieving ATO, conducting risk assessments, and coordinating incident response. No formal education required; TS/SCI with FSP clearance is needed.

Qualifications

• Develop, implement, and maintain security policies, procedures, and protocols.
• Ensure compliance with NIST SP 800-53, RMF, FISMA, JSIG, DAAPM, and other applicable frameworks.
• Lead efforts to achieve and maintain Authority to Operate (ATO).
• Conduct risk assessments and vulnerability scans using tools like ACAS, SCAP, and STIGs.
• Manage POA&Ms and ensure timely mitigation of identified vulnerabilities.
• Oversee configuration management and change control processes.
• Integrate security requirements into the System Development Lifecycle (SDLC).
• Maintain and update System Security Plans (SSPs) and other authorization documentation.
• Register and manage systems in eMASS or equivalent platforms.
• Coordinate cybersecurity incident response and reporting.
• Monitor system logs and network traffic for anomalies.
• Investigate security breaches and recommend corrective actions.
• Serve as a key advisor to system owners and stakeholders.
• Collaborate with ISSMs, ISSEs, PMs, and AOs to ensure security posture is maintained.
• Provide security awareness training and guidance to users.

Responsibilities

• Lead development and oversight of cybersecurity policies and procedures.
• Ensure compliance with federal regulations and industry standards.
• Manage risk and support system lifecycle from design through decommissioning.
• Lead efforts to achieve and maintain Authority to Operate (ATO).
• Coordinate cybersecurity incident response and reporting.
• Provide security awareness training and guidance to users.

Skills

Security governance

Compliance frameworks

NIST SP 800-53

RMF

FISMA

JSIG

ATO

Vulnerability assessment

ACAS

SCAP

STIGs

POA&Ms

Configuration management

Change control

SSP documentation

eMASS

Incident response

Log monitoring

Security training

Education

No formal education requirement

Tools

ACAS

SCAP

STIGs

Job description

ALEX is seeking a highly experienced Senior ISSO-S to lead the development, implementation, and oversight of cybersecurity policies for complex, classified systems at Fort Meade. The role ensures regulatory compliance, risk management, and lifecycle support from design through decommissioning.

Responsibilities include maintaining SSPs, achieving ATO, conducting risk assessments, and coordinating incident response. No formal education required; TS/SCI with FSP clearance is needed.