Senior ISSO: RMF Security & Privacy Leader

Quantum Sky; Washington (District of Columbia); On-site; USD 135,000 - 150,000; Full time

Benefits offered by this job

Health/Dental/Vision

401(k) match

Paid Time Off

Professional development reimbursement

Parental leave

Job summary

Quantum Sky is seeking a Sr Information Systems Security Officer (ISSO) to support a federal customer in Washington, DC. The role focuses on leading RMF activities, building trusted relationships with CORs and stakeholders, and delivering compliant, mission-ready security programs.

The ideal candidate will drive end-to-end security and privacy initiatives, maintain evidence for audits, and balance customer needs with regulations across security, privacy, and GRC domains.

Qualifications

• 8+ years of cybersecurity experience with at least 5 years in ISSO RMF activities.
• Bachelor’s degree or 4 years of additional experience in lieu of a degree.
• US Citizenship with Public Trust eligibility required.
• Knowledge of federal privacy programs, Privacy Act, and related laws.
• Experience with CSAT privacy initiatives and privacy training.

Responsibilities

• Lead RMF lifecycle activities including Authorization to Operate (ATO) and continuous monitoring.
• Develop, maintain, and present security documentation per NIST SP 800-53 (SSPs, RARs, SAPs, SARs, POA&Ms).
• Own security and privacy initiatives from planning through completion, drive remediation, and ensure on-time deliverables.
• Perform risk assessments, analyze vulnerability scans, and support continuous monitoring across apps, infra, and databases.
• Advise CORs, system owners, and stakeholders on complex security and privacy requirements.

Skills

RMF Expertise

NIST SP 800-53

Privacy regulations

COR liaison

Education

Bachelor's Degree

4 years experience instead of degree

Tools

Nessus

Qualys

ServiceNow

Job description

Quantum Sky is seeking a Sr Information Systems Security Officer (ISSO) to support a federal customer in Washington, DC. The role focuses on leading RMF activities, building trusted relationships with CORs and stakeholders, and delivering compliant, mission-ready security programs.

The ideal candidate will drive end-to-end security and privacy initiatives, maintain evidence for audits, and balance customer needs with regulations across security, privacy, and GRC domains.