Senior RMF ISSO — Army Systems Security Lead

COLSA Corporation; Huntsville (AL); On-site; USD 150,000 - 190,000; Full time

Job summary

COLSA Corporation seeks a Senior Information System Security Officer (ISSO) to support Army information systems through RMF documentation, control implementation, and continuous monitoring. You will work with system owners, engineers, and assessors to ensure an acceptable security posture and compliance with Army requirements.

The role emphasizes experience with RMF across all phases, vulnerability management, and remediation tracking, with preferred knowledge of AI/automation to enhance

Qualifications

• Bachelor’s degree in cybersecurity, information technology, computer science, information systems, engineering, or a related discipline.
• 10–12 years of progressively responsible experience in cybersecurity, information assurance, RMF, or information system security.
• Experience supporting RMF activities across all phases, including documentation, security control implementation, assessment support, authorization activities, and continuous monitoring.
• Experience serving as an Army ISSO or in a substantially equivalent information system security role supporting Army systems.
• Experience developing, maintaining, and reviewing RMF security documentation and authorization packages.
• Experience using ACAS, CMRS, STIGs, and vulnerability-management processes to identify, assess, and remediate cybersecurity risks.

Responsibilities

• Develop, maintain, and update RMF documentation (SSPs, assessment artifacts, control statements, risk assessments, continuous monitoring plans, POA&Ms).
• Coordinate with system owners, security managers, engineers, administrators, and assessors to implement and validate security controls.
• Review vulnerability scan results, compliance findings, and assessment results to identify risks and remediation recommendations.
• Use ACAS, CMRS, STIGs, and related tools to assess and improve system security posture.
• Track vulnerabilities, findings, waivers, exceptions, and remediation activities; manage POA&Ms through closure or risk acceptance.
• Support security of public-facing systems by identifying and mitigating externally accessible risk.
• Perform continuous monitoring activities including control reviews, vulnerability management, and configuration compliance reviews.
• Prepare senior-level status reports, risk summaries, briefings, and recommendations for leadership and stakeholders.
• Provide technical guidance and mentorship to junior RMF, ISSO, and cybersecurity personnel

Education

Bachelor’s degree in cybersecurity, information technology, computer science, information systems, engineering, or a related discipline.

Job description

COLSA Corporation seeks a Senior Information System Security Officer (ISSO) to support Army information systems through RMF documentation, control implementation, and continuous monitoring. You will work with system owners, engineers, and assessors to ensure an acceptable security posture and compliance with Army requirements.

The role emphasizes experience with RMF across all phases, vulnerability management, and remediation tracking, with preferred knowledge of AI/automation to enhance