(688) Senior ISSM SME

Arlo Solutions (Arlo) is an information technology consulting services company that specializes in delivering technology solutions. Our reputation reflects the high quality of the talented Arlo Solutions team and the consultants working in partnership with our customers. Our mission is to understand and meet the needs of both our customers and consultants by delivering quality, value-added solutions. Our solutions are designed and managed to not only reduce costs, but to improve business processes, accelerate response time, improve services to end-users, and give our customers a competitive edge, now and into the future. 

• →Serve as a primary contract point of contact for Government stakeholders, supporting communication, coordination, and issue resolution.
• →Manage day-to-day program operations to ensure team activities, priorities, and deliverables remain aligned with Government objectives.
• →Track tasks, milestones, action items, risks, dependencies, and deliverables across RMF and cybersecurity workstreams.
• →Support onboarding and offboarding of team members, including coordination of access, orientation, knowledge transfer, and transition activities.
• →Facilitate meetings, status updates, and working sessions with Government and contractor personnel.
• →Develop and maintain program documentation, schedules, trackers, process guides, and recurring status materials. Enterprise eMASS Governance & Workflow Management
• →Manage and oversee enterprise authorization activities within eMASS across supported systems and programs.
• →Coordinate, track, and manage eMASS workflows, artifacts, approvals, inheritance relationships, and authorization requests.
• →Support system onboarding, authorization sustainment, authorization extension, reciprocity, and Continuous Monitoring activities within eMASS.
• →Validate authorization package completeness, workflow progression, and cybersecurity artifact quality. Organizational Cybersecurity Governance & Policy Development 
  
  
• →Assist in developing and maintaining enterprise cybersecurity governance documentation including:
  • →Develop repeatable, scalable cybersecurity processes aligned to:
    • →Support organizational maturity and process standardization initiatives. Organizational Control Inheritance Strategy (eMASS Organizational Controls)
    • →Assist in defining, documenting, and operationalizing enterprise-level organizational controls for inheritance within eMASS.
    • →Help establish standardized inherited control baselines to reduce redundancy and improve authorization scalability.
    • →Identify common enterprise security services, policies, procedures, and safeguards eligible for inheritance.
• →Coordinate with cybersecurity leadership to define:
  • →Support implementation of enterprise authorization efficiencies through standardized control inheritance. ISSM Mentorship & Workforce Development
  • →Mentor junior and mid-level ISSMs, ISSOs, and cybersecurity personnel supporting CDAO systems.
  • →Provide coaching and guidance on:
  • →Promote consistency, quality, and repeatability across enterprise cybersecurity efforts. 
  • →Assist in establishing standardized cybersecurity governance expectations and best practices. ISSM Education & Training Support
  • →Support planning, coordination, and delivery of monthly ISSM education sessions.
• →Develop training content and instructional material covering:
  • →Facilitate knowledge sharing and enterprise cyber maturity improvement across supported ISSM personnel. Body of Evidence (BOE) Standardization & Template Development
  • →Assist in creating and maintaining standardized CDAO cybersecurity templates and Body of Evidence (BOE) artifacts.
  • → 
• →Develop reusable, repeatable templates to improve authorization package consistency and quality, including:
  • →Support cybersecurity artifact quality assurance and standardization across enterprise onboarding efforts. Continuous Monitoring (ConMon) & Cybersecurity Oversight
  • →Support enterprise Continuous Monitoring (ConMon) governance activities.
    
    
• →On Site Job Responsibilities and/or Success Factors Required Knowledge, Skills, & Experience
  • → Demonstrated experience as an ISSM, ISSO, ISSE, cybersecurity engineer, or RMF practitioner supporting DoD systems.
  • →Experience using eMASS for authorization package management and cybersecurity workflow execution.
  • →Knowledge of:/ Experience drafting cybersecurity policies, SOPs, Dash-1s, implementation guidance, or operational procedures. 
  • →Ability to mentor cybersecurity staff and support enterprise cyber workforce development.
    
    

• Must have an active TS/SCI Clearance 
• Bachelor’s degree in computer science/information technology, or other related degree fields (master’s degree is preferred or at least 10 years of related experience) 
• At least 10+ years of cybersecurity experience including a senior technical or management role, Project or Program Management experience a plus. 
• At least one IAT/IAM or equivalent security certifications ex. CISSP, CCSP, CISM, CISA, or CASP
• Experience working with OSD leadership or Military component or branch.
• Excellent communication/presentation skills briefing senior military and government civilian leadership.
• Experienced with writing policies, guides, procedures.
• Experience in hands on with eMASS, Xacta and/or other GRC tools.
• Experience with Federal and FedRamp A&A Processes. 
• Experienced and comfortable advising at the Senior Executive Service (SES) level of customers

We are proud to be an Affirmative Action and Equal Opportunity Employer and as such, we evaluate qualified candidates in full consideration without regard to race, color, religion, sex, sexual orientation, gender identity, marital status, national origin, age, disability status, protected veteran status, and any other protected status.