Information System Security Officer

Location: Hybrid - Smyrna, GA OR Fort Lee, VA

Job Type: W-2

Shift: First Shift; 3 days on-site and 2 days remote.

Pay Range: $80,000 - $82,200 exempt

Security Clearance: Secret

Summary

Ryan Consulting Group, Inc. is seeking a first shift ISSO with an ACTIVE Secret Clearance. This position is hybrid, 3 days on-site and 2 days remote.

This role provides Information System Security Officer (ISSO)-equivalent support by executing the DoD Risk Management Framework (RMF) in accordance with DoDI 8510.01, NIST SP 800-37, and NIST SP 800-30, and by developing and managing authorization packages and continuous monitoring artifacts in eMASS. The analyst supports multiple system authorizations and contributes to cybersecurity reporting and metrics, including maintaining network connection approvals via SNAP.

Responsibilities

• Execute RMF activities and provide ISSO / ISSO-equivalent A&A support for assigned systems across the system lifecycle (assessment, authorization, operations, and continuous monitoring).
• Support multiple Authorization to Operate (ATO), Authorization to Use (ATU), and Assess Only packages annually (approximately seven (7) authorization packages per year).
• Develop, maintain, and submit complete RMF Executive Packages for each authorization, including:
• System Security Plan (SSP)
• Security Assessment Report (SAR)
• Risk Assessment Report (RAR)
• Plan(s) of Action and Milestones (POA&M)
• Authorization Decision Document
• Register systems within the Enterprise Mission Assurance Support Service (eMASS) and use eMASS to support and automate RMF documentation, workflows, and reporting.
• Manage and maintain system authorization artifacts in eMASS, ensuring accurate documentation of:
• Security controls and implementation status
• Inheritance and shared control relationships
• Risk posture and supporting evidence
• POA&M creation, updates, and tracking
• Authorization status and lifecycle updates
• Coordinate with system owners, ISSMs, assessors, engineers, and AOs to support:
• Assessment planning and execution
• Remediation and risk mitigation activities
• Risk acceptance decisions and authorization outcomes
• Ongoing continuous monitoring activities
• Register and maintain all system/application connections in the Systems Network Approval Process (SNAP).
• Produce and deliver monthly and annual SNAP registration metrics.
• Support cybersecurity compliance, audit readiness, and reporting to ensure systems and technologies remain in an approved security posture.

Requirements

• 3 - 7 years of relevant cybersecurity / RMF / A&A experience
• eMASS
• DoDI 8510.01
• NIST SP 800-37
• NIST SP 800-30

Certifications

Must possess one or more of the following IAM Level III certification:

• CISM
• CISSP (or Associate)
• GSLC
• CCISO

Statements

Equal Employment Opportunity (EEO) Statement

Ryan Consulting Group, Inc. is an equal opportunity employer. We are dedicated to ensuring equal employment opportunities in all aspects of employment, including recruitment, hiring, promotion, training, compensation, benefits, and termination. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, veteran status, or any other characteristic protected by applicable law.

Ryan Consulting Group, Inc. is also committed to complying with the Americans with Disabilities Act (ADA) and providing reasonable accommodations for qualified individuals with disabilities. If you need assistance or accommodation due to a disability in the application process, please contact humanresources@consultrcg.com.

Drug-Free Workplace Statement

Ryan Consulting Group, Inc. is committed to maintaining a drug-free workplace, in compliance with the Drug-Free Workplace Act of 1988, which is a requirement for all federal contractors. We recognize the impact that drug and alcohol abuse can have on the safety, health, and productivity of our workforce, and we are dedicated to providing a work environment that is free from illegal drugs and alcohol. All employment offers are conditional upon successfully passing a drug screening.

Pay Transparency Statement

Ryan Consulting Group, Inc. complies with all relevant pay transparency laws in each state and jurisdiction where we operate. This includes providing salary ranges and pay data in compliance with state or local regulations where applicable.

We also ensure that applicants and employees in relevant states are informed of their right to inquire about pay information as required by state or local laws. Employees and applicants in states where pay transparency laws are in effect can expect to be provided with salary information upon request during the hiring process.