RMF Cybersecurity ISSO/SME 3
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
Cybersecurity Risk Management Framework Information System Security Officer managing RMF lifecycle activities for medical systems. Leading efforts to achieve and maintain Authorizations to Operate while ensuring compliance with cybersecurity requirements.
Responsibilities:
- Manage one or more information systems throughout the full six-step RMF lifecycle, including assessment, authorization, and continuous monitoring activities
- Serve as an RMF Subject Matter Expert (SME), advising stakeholders on cybersecurity compliance, risk posture, and ATO readiness
- Develop, review, and maintain RMF packages and associated documentation, including Security Plans, POA&Ms, Risk Assessment Reports, and security control policies
- Assess system compliance against NIST SP 800-53 controls and DHA RMF requirements as part of self-assessment and annual reviews
- Document and maintain evidence supporting control implementation and compliance
- Lead and participate in A&A and stakeholder meetings to track system status, resolve issues, and drive RMF progress
- Coordinate with engineers and system owners to develop architecture diagrams, system asset inventories, and security policies
- Prepare and deliver status reports to DHA leadership on system authorization and compliance efforts
Requirements:
- U.S. Citizen
- Active DoD Secret security clearance
- Bachelor’s degree in cybersecurity, information technology, or related field with 6+ years of experience; or 14+ years of relevant cybersecurity/IT experience in lieu of degree
- DoD Manual 8140.03 (formerly 8570.01)-compliant certification (e.g., Security+, CISSP, CASP+/SecurityX)
- Demonstrated experience performing RMF activities as an ISSO/ISSM/SME, including ATO process support and RMF package development (Security Plans, POA&Ms, architecture diagrams, system security policies, etc.)
- Demonstrated experience assessing and documenting NIST SP 800-53 controls
- Experience using Microsoft Office applications: Word, PowerPoint, Excel, and SharePoint
Benefits:
- 401K plan with company match
- Medical insurance
- Dental insurance
- Vision insurance
- Life insurance
- AD&D insurance
- Flexible spending account
- Disability insurance
- Paid time off
- Flexible work schedule
- Professional training and development
Similar Jobs
Senior Staff Product Manager – Platform Security
Senior Staff Product Manager leading Platform Security at Splunk, focusing on security primitives and cryptography. Driving product strategy and execution for a multi-billion-dollar portfolio.
Information Security Lead
Information Security Lead overseeing a comprehensive security program at Alloy Therapeutics. Responsible for both technical and governance aspects, ensuring data protection and compliance.
Senior Security Engineer
Senior Security Engineer with 7-10 years experience enhancing security and resilience of enterprise identity infrastructure for leading financial services organization.
Federal Security and Compliance Consultant
Federal Security & Compliance Consultant providing consulting and compliance support for Matrix Design Group's federal projects. Collaborating on security requirements and documentation while supporting client engagements.
Cybersecurity Engineer
Cyber-Security Engineer developing and implementing security concepts for IT, Cloud, and hybrid infrastructures. Contributing to security standards and regulatory compliance in a remote or hybrid capacity.
Director, Network Facility Security
Director of Network Facility Security responsible for leading U.S. physical security strategy at DSV. Ensuring compliance and operational excellence across the distribution network.
Associate Security Engineer, Identity Security
Associate Security Engineer providing hands-on support for identity security services in a global cybersecurity organization. Collaborating with teams on identity management and security technologies.
Senior Security Risk Management Consultant
Senior Security Risk Management Consultant driving enterprise-wide security risk management strategies. Partnering with stakeholders and senior leadership to assess and mitigate cybersecurity risks at Trinity Health.
Cybersecurity Project Manager
Cybersecurity Project Manager overseeing AI agent training and evaluation for customers in a dynamic cybersecurity firm. Collaborating with teams to enhance customer cybersecurity posture through innovative solutions.
Ethical Hacker – OT Security
OT Security Consultant at Packetlabs managing security assessments of Operational Technology environments. Collaborating with clients to improve security posture without operational disruptions.
Security Control Assessor – ISSE Support
Security Control Assessor supporting cybersecurity assessments and compliance activities for federal healthcare systems. Collaborating with teams to meet Federal security requirements and support modernization.
Identity & Devices Security Architect – Client Consulting
Security Architect at Cyclotron designing enterprise deployments of Microsoft 365 Identity and Device Management tools. Collaborating with clients to enhance protection of Microsoft-based assets.
Especialista Técnico, SAP Security & GRC Access Control
Technical Specialist in SAP Security & GRC Access Control involved in migrating systems and managing authorizations. Collaborating with teams to ensure integrity and compliance in security assignments.
Senior Consultant SAP Security, GRC Access Control
Senior SAP Security Consultant leading migration of SAP GRC Access Control to 12 Embedded. Requires expertise in SAP Security tools and methodologies for implementation.
Principal Enterprise Security Architect, Senior Associate
Principal Enterprise Security Architect at Intelance responsible for security architecture reviews and risk assessments for complex enterprises. Collaborating with governance and risk advisors and producing client-ready reports.
Presales Security Expert – Major Account Manager GSI
Presales Security Expert enabling the success of Fortinet's growing cybersecurity business. Collaborating with Account Managers and building technical relationships with customers for secure platform solutions.
Social Security Disability Benefits Expert
Disability Benefits Expert conducting consultations for SSI eligibility assessment and managing cases. Offering unbiased guidance on federal and state benefits through a remote work environment.
Senior SAP Security Consultant – GRC/AC
SAP Security Consultant focusing on S/4HANA implementation and security requirements for clients in Brazil. Working remotely, directly engaging with business areas and technical documentation.
Enterprise Account Executive – Cybersecurity
Enterprise Account Executive responsible for driving strategic growth across large enterprise clients in cybersecurity. Partnering with C-level leaders to transform cyber risk management in complex sales cycles.
Senior Security Advisor – Offensive and Defensive
Senior Offensive Security Advisor helping mitigate threats to Desjardins's systems and networks. Leading strategic initiatives and advising on security posture.