ISSO Lead

Location: Washington, DC, United States

ISSO Lead

The ISSO Lead is a senior cybersecurity governance and risk-management professional responsible for supporting federal information systems throughout the complete Risk Management Framework (RMF) lifecycle. This position leads ISSO activities across a large portfolio of systems, maintains authorization status, oversees security documentation, and advises system owners, ISSMs, and Authorizing Officials on cybersecurity risk. 

Compensation & Benefits

Pay commensurate with experience.

Full-time benefits include Medical, Dental, Vision, 401K, and other possible benefits as provided. Benefits are subject to change with or without notice. 

ISSO Lead Responsibilities Include:

• Lead ISSO, FISMA, RMF, and Assessment and Authorization activities for federal systems. 

• Apply NIST SP 800-37, NIST SP 800-53, FIPS 199, and NIST SP 800-60 requirements. 

• Support obtaining and maintaining Authorities to Operate (ATOs). 

• Develop and maintain SSPs, POA&Ms, PIAs, DIRAs, ISAs, SARs, Security Assessment Plans, Incident Response Plans, Contingency Plans, and Security Impact Assessments. 

• Track system lifecycles, authorization status, control implementation, vulnerabilities, and enterprise risks. 

• Manage continuous-monitoring and annual FISMA reporting activities. 

• Coordinate vulnerability remediation with system owners, engineering teams, assessors, SOC teams, and security operations contractors. 

• Support federal audits, inspections, data calls, and security assessments. 

• Prepare executive-level risk briefings, compliance reports, metrics, and recommendations. 

• Lead or mentor ISSOs and maintain consistent security documentation across multiple systems. 

• Perform other job-related duties as assigned. 

ISSO Lead Experience, Education, Skills, Abilities Requested:

• Bachelor’s degree in cybersecurity, information technology, computer science, engineering, or a related field. 

• Minimum of 8 years of relevant cybersecurity experience. 

• CISSP, CISM, or equivalent senior-level cybersecurity certification. 

• Active Top Secret (TS) security clearance is required. Candidates must possess the required clearance to be considered for this position. 

• U.S. citizenship required. 

• Experience leading ISSO, FISMA, RMF, or Assessment and Authorization activities for federal systems. 

• Experience supporting large federal system portfolios preferred. 

• Department of State or Bureau of Consular Affairs experience preferred. 

• Familiarity with ArchAngel or another federal GRC platform preferred. 

• Experience with Tenable Nessus, Wiz, iPost, vulnerability reporting, and POA&M tracking preferred. 

• Understanding of DevSecOps, CI/CD security controls, cloud security, zero-trust requirements, and High Value Assets preferred. 

• Must pass pre-employment qualifications of Cherokee Federal.

 

Company Information

Criterion is part of Cherokee Federal — the division of tribally owned federal contracting companies owned by Cherokee Nation Businesses. As a trusted partner supporting federal customers, Cherokee Federal companies are focused on solving complex challenges and serving the government’s mission

 

#CherokeeFederal #LI-SM2 #AppC 

Similar searchable job titles: 

• Lead Information System Security Officer

• Senior ISSO

• ISSO Manager

• Cybersecurity Governance Lead

•  RMF Lead

• Senior A&A Lead

•  Information System Security Manager

• Cybersecurity Risk and Compliance Lead.

 

Keywords: 

• ISSO

• FISMA

• RMF

• ATO

• NIST 800-37

• NIST 800-53

• FIPS 199

• A&A

• SSP

• ArchAngel

• Tenable

Pipeline Position Notice: 
This is a pipeline position intended to identify qualified candidates for anticipated future opportunities. This posting does not represent a current vacancy. Candidates who meet the qualifications may be contacted as positions become available and program requirements are finalized.

The ISSO Lead is a senior cybersecurity governance and risk-management professional responsible for supporting federal information systems throughout the complete Risk Management Framework (RMF) lifecycle. This position leads ISSO activities across a large portfolio of systems, maintains authorization status, oversees security documentation, and advises system owners, ISSMs, and Authorizing Officials on cybersecurity risk.