Senior ISSO: RMF Security & Compliance Leader

Columbia Technology Partners, Inc; Annapolis, Northern (MD, KY); Hybrid; USD 120,000 - 180,000; Full time

Job summary

Columbia Technology Partners, Inc is seeking an Information Systems Security Officer (ISSO) to support the security posture of mission-critical environments. The role involves implementing security policies, RMF activities, and ensuring compliance across systems, with opportunities to lead security operations and authorization efforts.

The ideal candidate will work with ISSMs, engineers, and government stakeholders to develop SSPs, C&A packages, and risk assessments while maintaining information

Qualifications

• Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or related field.
• 10 years of ISSO experience supporting programs/contracts of similar scope.
• DoD 8570 IAM Level I or higher is required.
• Experience in at least two security areas: tools/technologies, hardware/software security, protocols, or encryption.

Responsibilities

• Implement and enforce information systems security policies and standards.
• Maintain operational security posture and ensure compliance with security requirements.
• Support RMF activities including authorization packages and risk assessments.
• Develop and review security documentation (SSPs, A&A, SRTMs).
• Assist with vulnerability assessments and risk analyses.
• Maintain access controls and configuration management for security-relevant systems.

Skills

ISSO experience

RMF knowledge

C&A knowledge

SSP documentation

Education

Bachelor's degree in CS/Cybersecurity

Job description

Columbia Technology Partners, Inc is seeking an Information Systems Security Officer (ISSO) to support the security posture of mission-critical environments. The role involves implementing security policies, RMF activities, and ensuring compliance across systems, with opportunities to lead security operations and authorization efforts.

The ideal candidate will work with ISSMs, engineers, and government stakeholders to develop SSPs, C&A packages, and risk assessments while maintaining information