ISSO Lead

ISSO Lead

The ISSO Lead is a senior cybersecurity governance and risk-management professional responsible for supporting federal information systems throughout the complete Risk Management Framework (RMF) lifecycle. This position leads ISSO activities across a large portfolio of systems, maintains authorization status, oversees security documentation, and advises system owners, ISSMs, and Authorizing Officials on cybersecurity risk.

Compensation & Benefits

• Pay commensurate with experience.
• Full-time benefits include Medical, Dental, Vision, 401K, and other possible benefits as provided. Benefits are subject to change with or without notice.

ISSO Lead Responsibilities Include

• Lead ISSO, FISMA, RMF, and Assessment and Authorization activities for federal systems.
• Apply NIST SP 800-37, NIST SP 800-53, FIPS 199, and NIST SP 800-60 requirements.
• Support obtaining and maintaining Authorities to Operate (ATOs).
• Develop and maintain SSPs, POA&Ms, PIAs, DIRAs, ISAs, SARs, Security Assessment Plans, Incident Response Plans, Contingency Plans, and Security Impact Assessments.
• Track system lifecycles, authorization status, control implementation, vulnerabilities, and enterprise risks.
• Manage continuous-monitoring and annual FISMA reporting activities.
• Coordinate vulnerability remediation with system owners, engineering teams, assessors, SOC teams, and security operations contractors.
• Support federal audits, inspections, data calls, and security assessments.
• Prepare executive-level risk briefings, compliance reports, metrics, and recommendations.
• Lead or mentor ISSOs and maintain consistent security documentation across multiple systems.
• Perform other job-related duties as assigned.

ISSO Lead Experience, Education, Skills, Abilities Requested

• Bachelor’s degree in cybersecurity, information technology, computer science, engineering, or a related field.
• Minimum of 8 years of relevant cybersecurity experience.
• CISSP, CISM, or equivalent senior-level cybersecurity certification.
• Active Top Secret (TS) security clearance is required. Candidates must possess the required clearance to be considered for this position.
• U.S. citizenship required.
• Experience leading ISSO, FISMA, RMF, or Assessment and Authorization activities for federal systems.
• Experience supporting large federal system portfolios preferred.
• Department of State or Bureau of Consular Affairs experience preferred.
• Familiarity with ArchAngel or another federal GRC platform preferred.
• Experience with Tenable Nessus, Wiz, iPost, vulnerability reporting, and POA&M tracking preferred.
• Understanding of DevSecOps, CI/CD security controls, cloud security, zero-trust requirements, and High Value Assets preferred.
• Must pass pre-employment qualifications of Cherokee Federal.

Company Information

Criterion is part of Cherokee Federal — the division of tribally owned federal contracting companies owned by Cherokee Nation Businesses. As a trusted partner supporting federal customers, Cherokee Federal companies are focused on solving complex challenges and serving the government’s mission

#CherokeeFederal #LI-SM2 #AppC

Similar searchable job titles

• Lead Information System Security Officer
• Senior ISSO
• ISSO Manager
• Cybersecurity Governance Lead
• RMF Lead
• Senior A&A Lead
• Information System Security Manager
• Cybersecurity Risk and Compliance Lead.

Keywords

• ISSO
• FISMA
• RMF
• ATO
• NIST 800-37
• NIST 800-53
• FIPS 199
• A&A
• SSP
• ArchAngel
• Tenable

Pipeline Position Notice

This is a pipeline position intended to identify qualified candidates for anticipated future opportunities. This posting does not represent a current vacancy. Candidates who meet the qualifications may be contacted as positions become available and program requirements are finalized.