Senior ISSO - RMF & Security Assessment Leader

CGS Federal (Contact Government Services); Austin (TX); On-site; USD 90,000 - 130,000; Full time

Benefits offered by this job

Health, dental, and vision

Life Insurance

401k

Flexible Spending Account

Paid Time Off and federal holidays

Job summary

CGS Federal (Contact Government Services) seeks an Information Systems Security Officer (ISSO) with RMF/DIACAP experience to support Dept. of Commerce systems and obtain their Authorization to Operate (ATO).

The role is located at the client site in the Herbert Hoover building, Washington, DC, performing full lifecycle A&A management and RMF activities. Responsibilities include security assessment, documentation, risk management, and applying NIST RMF requirements.

Qualifications

• Bachelor’s degree and 5+ years IA/ISSO experience in ATO packages.
• Experience generating security documentation and RMF/DIACAP artifacts.
• eMASS experience and security certification preferred.
• Strong writing and documentation skills.
• Ability to work in a federal client environment.

Responsibilities

• Review systems for security weaknesses and document upgrades.
• Manage cybersecurity risk and risk registry.
• Provide RMF guidance and validation.
• Coordinate CM changes with ISSM/SCA/AO.
• Support DIACAP to RMF transition.
• Prepare ATO documentation and assessments.

Skills

Security assessment

RMF experience

DIACAP experience

Risk management

NIST 800-53

Vulnerability scanning

HBSS/ACAS

A&A documentation

eMASS experience

Writing skills

Education

Bachelor’s Degree

Tools

Microsoft Word

Excel

Job description

CGS Federal (Contact Government Services) seeks an Information Systems Security Officer (ISSO) with RMF/DIACAP experience to support Dept. of Commerce systems and obtain their Authorization to Operate (ATO).

The role is located at the client site in the Herbert Hoover building, Washington, DC, performing full lifecycle A&A management and RMF activities. Responsibilities include security assessment, documentation, risk management, and applying NIST RMF requirements.