ISSO Information Assurance/Security Specialist (Senior/SME)

Key Responsibilities

• Lead end-to-end Risk Management Framework (RMF) and Authorization to Operate (ATO) processes, preparing and maintaining comprehensive security packages (SSP, RA, PTA, PIA, ST&E, and POA&M) in compliance with NIST SP 800-53, SP 800-37, and FISMA standards.
• Develop, evaluate, and audit Cloud Service package documentation to ensure agency and FedRAMP compliance for cloud integrations.
• Oversee regular vulnerability scans (Qualys, Nessus, Nexpose, ACAS), analyze Splunk audit logs, evaluate system hardening (STIGs/SCAP), and drive POA&M remediation efforts.
• Support and optimize Continuous Diagnostics and Mitigation (CDM) initiatives, automated security controls monitoring, and Zero Trust security architectures.
• Serve on Change Control Boards (CCB) to review proposed system design changes, perform security impact analyses, and ensure baseline compliance.
• Brief CISOs, System Owners, and senior stakeholders on overall system security posture, residual risk, and threat mitigation strategies.