ISSO

The Opportunity
• Own theday-to-day security authorization posture of assigned DoD information systems
• Work within awell-resourced team with dedicated engineering, operations, and architecturesupport
• Develop expertisein modern RMF tooling including eMASS and eMASSer automation
• Directly supportmission continuity by managing ATO packages and continuous monitoring programs
• Grow into asenior GRC role with clear advancement pathways Responsibilities
• Develop,maintain, and update System Security Plans (SSPs) for assigned systems
• Manage POA&Msfrom identification through remediation and closure
• Compile andsubmit Authorization to Operate (ATO) packages
• Conductcontinuous monitoring activities per established strategy
• Utilize eMASS forGRC management and RMF workflow tracking
• Coordinate withISSEs and SecOps to validate control implementations
• Develop SecurityAssessment Plans (SAPs) and support SAR coordination
• Draft supplychain risk management plans
• Support theCybersecurity Architect with RMF strategic planning Qualifications
Required:
• Active Secret orTS clearance
• 3-5 years ofRMF/ATO experience within DoD or federal environments
• Hands-onexperience with eMASS
• Working knowledgeof NIST SP 800-53r5 and DoD RMF processes
• Demonstratedability to independently author SSPs and manage POA&Ms
Required Certification:
• DoD 8140.03M DCWFBasic tier certification - CEH
Desired Certification:
• DoD 8140.03M DCWFIntermediate tier certification - one of: CEH(P), RCCE Level 1, Cloud+, CPTE,FITSP-A, GCED, GCIH, GCSA, GICSP, GSEC, PenTest+, or Security+
Required Education:
• DoD 8140 InterimEducation Options
Desired Education:
• Bachelor's degreein Computer Science, Cybersecurity, Data Science, Information Systems,Information Technology, or Software Engineering
Desired:
• Experience witheMASSer or similar RMF automation tooling
• Exposure tocloud-hosted or hybrid system authorization boundaries
• Familiarity withthe DoD RMF Knowledge Service