1mo ago

Lead Information System Security Officer (ISSO)

United States·Washingtonlead

OtherInformation System Security OfficerCybersecurityGovernance Risk and Compliance Manager

4 views0 saves0 applied

Apply Now

Quick Summary

Key Responsibilities

Provide on-site cybersecurity and RMF sustainment support. Chair internal quality reviews and ensure deliverables are complete, current, consistent, timely, and audit ready. Manage technical risks,

Requirements Summary

C3EL is seeking a Lead Information System Security Officer (ISSO) to provide on-site cybersecurity and Risk Management Framework (RMF) sustainment support in Washington, D.C., for a new contract.

Technical Tools

OtherInformation System Security OfficerCybersecurityGovernance Risk and Compliance Manager

Responsibilities

~1 min read

→Provide on-site cybersecurity and RMF sustainment support.
→Chair internal quality reviews and ensure deliverables are complete, current, consistent, timely, and audit ready.
→Manage technical risks, issues, escalations, SLA/KPI/AQL performance, action items, and corrective actions.
→Support weekly reports, monthly status reports, and quarterly executive reviews, including authorization, vulnerability, POA&M, audit, and staffing status.
→Lead a team of two Senior ISSOs and maintain coverage during absence, vacancy, surge, or suitability delay.
→Produce accurate, concise, and audit-ready Government cybersecurity documentation.
→Support team coverage from 7:00 a.m. to 6:00 p.m. ET (M-F) and participate in after-hours incident coverage as needed.

Requirements

~1 min read

U.S. Citizenship.
Eligibility to obtain a Tier 4 High-Risk Public Trust.
Minimum ten (10) years in cybersecurity.
Minimum seven (7) years in federal RMF/ISSO work.
Minimum three (3) years leading ISSO or authorization teams.
Hands-on CSAM experience supporting system profiles, controls, evidence, POA&Ms, and authorization workflows.
Working knowledge of NIST SP 800-37, 800-53, 800-53B, FIPS 199, FISMA, and applicable CISA/OMB guidance.
Familiarity with GRC, ITSM, SIEM, scanner, identity, endpoint, and cloud-security platforms.
Direct experience briefing and coordinating with ISSMs, CISOs, AOs, AODRs, System Owners, assessors, and senior Government officials.
Direct experience overseeing SSPs, SAPs, SARs, POA&Ms, risk assessments, control statements, and evidence packages.
Expert knowledge of all seven RMF steps, ATO, reauthorization, ongoing authorization, control baselines, and inheritance.
Working proficiency with ServiceNow, Splunk, and vulnerability-scanning platforms.