Senior RMF & ISSO (Information Security)

Colsa; Huntsville (AL); On-site; USD 120,000 - 160,000; Full time

Benefits offered by this job

Medical insurance

401(k) with company match

Education & Certification Reimb.

Job summary

COLSA Corporation in Huntsville, AL is seeking a Senior Information System Security Officer (ISSO) to lead the cybersecurity RMF lifecycle across Army information systems. You will develop documentation, implement controls, and oversee continuous monitoring, risk assessment, and POA&M management.

The role requires extensive RMF experience, strong communication with stakeholders, and a current Secret clearance. AI/automation experience is a plus.

Qualifications

• Bachelor’s degree in cybersecurity, information technology, computer science, information systems, engineering, or related discipline.
• 10–12 years of progressively responsible experience in cybersecurity, information assurance, RMF, or information system security.
• Demonstrated experience supporting RMF activities across all phases, including documentation, security control implementation, assessment support, authorization activities, and continuous monitoring.
• Experience serving as an Army ISSO or in a substantially equivalent information system security role supporting Army systems.
• Demonstrated experience developing, maintaining, and reviewing RMF security documentation and authorization packages.
• Experience using ACAS, CMRS, STIGs, and vulnerability-management processes to identify, assess, and remediate cybersecurity risks.
• Experience managing POA&Ms, including documenting findings, assigning corrective actions, tracking remediation progress, and supporting closure decisions.
• Experience supporting cybersecurity requirements for public-facing systems or externally accessible components.
• Strong understanding of vulnerability management, configuration compliance, security control assessment, risk documentation, and continuous monitoring practices.
• Ability to communicate complex technical risks and compliance issues clearly to technical teams, program managers, and senior leadership.
• Ability to work independently, prioritize multiple efforts, and lead coordination across diverse technical and programmatic stakeholders.
• Active Secret clearance; US Citizenship required.

Responsibilities

• Develop, maintain, and update RMF documentation, including SSPs, security assessment artifacts, control implementation statements, risk assessments, continuous monitoring plans, and POA&Ms.
• Coordinate with system owners, information system security managers, engineers, administrators, and assessors to implement and validate security controls.
• Review and analyze vulnerability scan results, compliance findings, and security assessment results to identify risks and develop remediation recommendations.
• Use ACAS, CMRS, STIGs, and related cybersecurity tools to assess and improve system security posture.
• Track vulnerabilities, findings, waivers, exceptions, and remediation activities; manage POA&Ms through closure or risk acceptance by the appropriate authority.
• Support the security of public-facing systems and components by identifying, documenting, and mitigating risks associated with externally accessible services.
• Perform continuous monitoring activities, including periodic control reviews, vulnerability management, configuration compliance reviews, and security artifact updates.
• Prepare senior-level status reports, risk summaries, briefings, and recommendations for program leadership and cybersecurity stakeholders.
• Provide technical guidance and mentorship to junior RMF, ISSO, and cybersecurity personnel

Skills

RMF expertise

Independent worker

Leadership

Risk assessment

Communication with leadership

Education

Bachelor’s degree in cybersecurity

Master’s degree (preferred)

Tools

ACAS

CMRS

STIGs

Vulnerability management tools

Job description

COLSA Corporation in Huntsville, AL is seeking a Senior Information System Security Officer (ISSO) to lead the cybersecurity RMF lifecycle across Army information systems. You will develop documentation, implement controls, and oversee continuous monitoring, risk assessment, and POA&M management.

The role requires extensive RMF experience, strong communication with stakeholders, and a current Secret clearance. AI/automation experience is a plus.