ISSO Lead

The ISSO Lead is a senior cybersecurity governance and risk-management professional responsible for supporting federal information systems throughout the complete Risk Management Framework (RMF) lifecycle. This position leads ISSO activities across a large portfolio of systems, maintains authorization status, oversees security documentation, and advises system owners, ISSMs, and Authorizing Officials on cybersecurity risk.

Pay commensurate with experience.

Full-time benefits include Medical, Dental, Vision, 401K, and other possible benefits as provided. Benefits are subject to change with or without notice.

• Lead ISSO, FISMA, RMF, and Assessment and Authorization activities for federal systems.

• Apply NIST SP 800-37, NIST SP 800-53, FIPS 199, and NIST SP 800-60 requirements.

• Support obtaining and maintaining Authorities to Operate (ATOs).

• Develop and maintain SSPs, POA&Ms, PIAs, DIRAs, ISAs, SARs, Security Assessment Plans, Incident Response Plans, Contingency Plans, and Security Impact Assessments.

• Track system lifecycles, authorization status, control implementation, vulnerabilities, and enterprise risks.

• Manage continuous-monitoring and annual FISMA reporting activities.

• Coordinate vulnerability remediation with system owners, engineering teams, assessors, SOC teams, and security operations contractors.

• Support federal audits, inspections, data calls, and security assessments.

• Prepare executive-level risk briefings, compliance reports, metrics, and recommendations.

• Lead or mentor ISSOs and maintain consistent security documentation across multiple systems.

• Perform other job-related duties as assigned.

• Bachelor's degree in cybersecurity, information technology, computer science, engineering, or a related field.

• Minimum of 8 years of relevant cybersecurity experience.

• CISSP, CISM, or equivalent senior-level cybersecurity certification.

• Active Top Secret (TS) security clearance is required. Candidates must possess the required clearance to be considered for this position.

• U.S. citizenship required.

• Experience leading ISSO, FISMA, RMF, or Assessment and Authorization activities for federal systems.

• Experience supporting large federal system portfolios preferred.

• Department of State or Bureau of Consular Affairs experience preferred.

• Familiarity with ArchAngel or another federal GRC platform preferred.

• Experience with Tenable Nessus, Wiz, iPost, vulnerability reporting, and POA&M tracking preferred.

• Understanding of DevSecOps, CI/CD security controls, cloud security, zero-trust requirements, and High Value Assets preferred.

• Must pass pre-employment qualifications of Cherokee Federal.

Criterion is part of Cherokee Federal - the division of tribally owned federal contracting companies owned by Cherokee Nation Businesses. As a trusted partner supporting federal customers, Cherokee Federal companies are focused on solving complex challenges and serving the government's mission

#CherokeeFederal #LI-SM2 #AppC

Similar searchable job titles:

• Lead Information System Security Officer

• Senior ISSO

• ISSO Manager

• Cybersecurity Governance Lead

• RMF Lead

• Senior A&A Lead

• Information System Security Manager

• Cybersecurity Risk and Compliance Lead.

Keywords:

• ISSO

• FISMA

• RMF

• ATO

• NIST 800-37

• NIST 800-53

• FIPS 199

• A&A

• SSP

• ArchAngel

• Tenable

Pipeline Position Notice:
This is a pipeline position intended to identify qualified candidates for anticipated future opportunities. This posting does not represent a current vacancy. Candidates who meet the qualifications may be contacted as positions become available and program requirements are finalized.