RMF/ISSO Analyst

DecisionPoint seeks a Senior RMF/ISSO Analyst to support Risk Management Framework, authorization, security-control assessment, and continuous-monitoring activities for the USMEPCOM ENLIST program. 

The RMF/ISSO Analyst will maintain authorization artifacts, control implementation statements, interconnection agreements, continuous-monitoring evidence, and system-level Plans of Action and Milestones. This role will support Tenant Security Plan compliance, Authority to Operate and Authority to Connect package reviews, security-control testing, and Security Test and Evaluation planning and execution. 

The successful candidate will work with the Government Information System Security Manager, system owners, technical teams, assessors, and other cybersecurity stakeholders to resolve review comments and maintain complete, accurate, and traceable authorization evidence. 

This position is remote, with a preference for candidates located in the Chicago area. 

• →Active Secret clearance or higher. 

• →Bachelor’s degree in Cybersecurity, Information Systems, or a related field. 

• →Minimum of 10 years of relevant cybersecurity, information assurance, RMF, or information-system security experience. 

• →Current CompTIA Security+ certification. 

• →Experience supporting the Department of Defense Risk Management Framework. 

• →Proficiency with eMASS or the Government-designated authorization repository. 

• Experience performing Information System Security Officer duties in a federal or DoD environment. 

• Experience supporting Government ISSMs, system owners, Security Control Assessors, Authorizing Officials, or Common Control Providers. 

• Working knowledge of DoDI 8510.01, NIST SP 800-37, NIST SP 800-53, FISMA, and applicable DoD cybersecurity policies. 

• Experience developing or maintaining system security plans, control implementation statements, interconnection agreements, continuous-monitoring strategies, and authorization decision documentation. 

• Experience supporting ATO, ATC, reaccreditation, and ongoing authorization activities. 

• Experience developing and executing Security Test and Evaluation plans. 

• Experience conducting security-control assessments, control validation, evidence reviews, and authorization-readiness reviews. 

• Experience managing system-level POA&Ms and coordinating technical remediation activities. 

• Familiarity with ACAS or Tenable, STIG Viewer, SCAP tools, Endpoint Security Solutions, or comparable DoD cybersecurity technologies. 

• Experience maintaining traceable evidence repositories and resolving assessor or audit comments. 

• Additional certifications such as CGRC, CAP, CISM, CISSP, CASP+, or equivalent cybersecurity credentials. 

• Familiarity with current DoD 8140 cybersecurity workforce qualification requirements. 

• Strong technical writing, documentation management, analytical, and stakeholder-coordination skills. 

• Ability to explain technical security-control deficiencies and authorization risks to both technical and nontechnical stakeholders. 

• EEO and Affirmative Action Policy: DecisionPoint Corporation is an Equal Employment Opportunity and Affirmative Action employer. It is the policy of DecisionPoint Corporation to provide equal employment opportunity in accordance with all applicable Equal Employment Opportunity/Affirmative Action laws, directives and regulations to all employees and qualified applicants without regard to race, ethnicity, color, religion, national origin, sex, age, disability status, pregnancy, sexual orientation, gender identity, genetic information, protected veteran status, or any other protected status under Federal, State or Local laws.
• Pay Transparency Policy: In accordance with Presidential Executive Order 13665, DecisionPoint Corporation will not discharge or in any other manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay or the pay of another employee or applicant. However, employees who have access to the compensation information of other employees or applicants as a part of their essential job functions cannot disclose the pay of other employees or applicants to individuals who do not otherwise have access to compensation information, unless the disclosure is (a) in response to a formal complaint or charge, (b) in furtherance of an investigation, proceeding, hearing, or action, including an investigation conducted by the employer, or (c) consistent with the contractor's legal duty to furnish information.
• Authorization to Share Resume and Personal Information: By expressing your interest and submitting your resume for this position, you authorize DecisionPoint Corporation to share your resume, as well as personal information included on the resume, with its subsidiaries, affiliates and teaming partners for the purpose of considering you for this position and other available positions requiring comparable skills, education and experience. Should DecisionPoint Corporation. or its affiliates and teaming partners wish to initiate pre-employment discussions, you will be asked to complete an employment application and related employment documents.