ISSO

About the Role

We are seeking an ISSO to join our Prime Contract with the Defense Threat Reduction Agency (DTRA). The CSSP ISSO serves as the authoritative Risk Management Framework (RMF) and compliance subject matter expert supporting DTRA. This role acts as a critical validation bridge between the CSSP Protect Team and the CSSP’s subscriber organizations, providing rigorous, specialized validation of cybersecurity artifacts against NIST 800-53 Rev 5 controls requirements to ensure accurate, continuous authorization and risk mitigation.

Responsibilities

• Serve as the final layer of validation for RMF artifacts (e.g., Authorization Boundary Diagrams, HW/SW Lists, Credentialed Scans, SSPs, POA&Ms, SARs, SAPs) collected by Protect Analysts from CSSP subscribers, ensuring all evidence accurately satisfies operational directives.
• Map collected artifacts and subscriber security implementations directly to NIST 800-53 Rev 5 control families, ensuring compliance with federal baseline security standards.
• Partner closely with CSSP Protect Analysts to translate complex RMF requirements into actionable data-collection requests, bridging the gap between technical cybersecurity operations and formal governance/compliance requirements.
• Cross-reference technical vulnerability scan data (ACAS, SCAP, HBSS findings) against subscriber-provided artifacts to ensure that active system weaknesses are accurately documented in current POA&Ms.
• Verify, review, and assist in managing security control baselines and validation evidence directly within the Enterprise Mission Assurance Support Service (eMASS) database for all subscriber enclaves.
• Evaluate subscriber POA&Ms for accuracy, feasibility, and appropriate risk scoring. Provide clear, actionable feedback to the Protect team and subscribers when artifacts fall short of compliance standards.
• Work closely with the CSSP Auditor to maintain highly organized, audit-ready repositories of validated artifacts to support JFHQ-DoDIN operational directives and overarching CSSP Evaluator Scoring Metric (ESM) assessments.

Requirements

• Active Top-Secret Clearance with SCI eligibility required.
• DoD 8570/8140 IAM Level III or CSSP Auditor equivalent certification.
• 3–8 years of progressive experience in Information Assurance, RMF, and NIST compliance.
• 2–5 years working in a SOC or CSSP environment.
• Extensive, hands-on experience with NIST SP 800-53 (Rev 5 preferred) and DoD RMF processes.
• BA/BS College degree required.
• Must be a US Citizen.

Work Environment

The work environment is a professional office setting located at Fort Belvoir, VA. The noise level is medium.

• Schedule: Monday – Friday core hours 0800-1600.
• Travel: 1-2 weeks annually (rare deployment occasions and training attendance).

Physical Demands

The physical demands described are representative of those that must be met to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities.

• Regularly required to use hands to handle, feel, or touch; reach with hands and arms; talk and hear.
• Regularly required to stand, walk, sit, climb or balance, stoop, kneel, crouch, or crawl.
• Regularly required to lift up to 10 pounds; frequently required to lift up to 25 pounds; and occasionally up to 50 pounds.
• Vision requirements include close vision, distance vision, peripheral vision, depth perception, and ability to adjust focus.

Pay

Target salary range: $110,000.00 - $170,000.00. The salary range is an estimate and will be determined based on the individual’s education, knowledge, skills, competencies, experience, contract parameters, and organizational requirements.

Benefits

• Health, dental, and vision insurance.
• 401K retirement plan.
• Life insurance.
• Short-term and long-term disability plans.
• Paid vacation time and holidays.