ISSO (TS/SCI)

Responsibilities

• Serve as the lead cybersecurity advisor, overseeing Assessment & Authorization (A&A), Continuous Monitoring (ConMon), governance, and risk management activities.
• Partner with Program Managers, ISOs, engineers, SCAs, AOs, and government leadership to integrate cybersecurity across the system lifecycle.
• Lead all phases of the DoD Risk Management Framework (RMF), including categorization, control implementation, assessment, authorization, and continuous monitoring.
• Develop and maintain RMF artifacts, including SSPs, POA&Ms, assessment documentation, ConMon records, and supporting evidence.
• Cook up A&A activities supporting ATOs, IATTs, ATO-Cs, and system reauthorizations.
• Manage continuous monitoring, vulnerability management, STIG compliance, security controls, and cybersecurity reporting.
• Conduct risk assessments and provide recommendations to support Authorizing Official (AO) decisions.
• Cook up Security Control Assessments (SCAs), validate corrective actions, and track remediation efforts.
• Review system architectures, authorization boundaries, and system changes to ensure ongoing compliance.
• Prepare executive briefings, authorization recommendations, and cybersecurity status reports.
• Support Zero Trust, cloud security, DevSecOps, reciprocity, inherited controls, and enterprise cybersecurity initiatives.

Qualifications

• Bachelor's degree and 8+ years of experience supporting cybersecurity programs conducting A&A activities.
• Active Top Secret w/ SCI eligibility.
• Certifications: IAT III (CISSP, CISM, CASP+, CCSP, etc.).
• Experience managing multiple RMF authorization packages.
• Experience briefing Government leadership and preparing documentation.
• Experience implementing Zero Trust architecture and cloud security.

Pay

Total compensation based on experience level - $130,000-$150,000+

Benefits

• PTO
• Holidays
• 401K
• Medical
• Dental
• Vision coverage
• Certification Reimbursement

Contact

Zachary Piper Solutions is seeking an individual to lead Risk Management Lifecycle efforts supporting Controlled Unclassified Information through classified environments for the Acquisition & Sustainment branch. Details below: Clearance: Top Secret, SCI eligibility Location: Alexandria, VA (Hybrid - 1x/week onsite)