Senior Information System Security Officer (ISSO)
C3EL
Salary undisclosed
Need a reasonable accommodation to apply or interview? Contact us.
JobMinglr uses automated technology to recommend jobs based on profile information and job preferences. Match Score does not determine eligibility for a position, prevent a user from viewing or applying to a job, or make hiring decisions on behalf of an employer.
Description
**CONTINGENT UPON CONTRACT AWARD**
Overview:
Job Title: Senior Information System Security Officer (ISSO)
Security Clearance: Ability to Obtain Tier 4 High-Risk Public Trust
Location: Washington, D.C.
(Due to the nature of the work and contract requirements, U.S. Citizenship is required.)
Description:
C3EL is seeking a Senior Information System Security Officer (ISSO) to provide on-site cybersecurity and Risk Management Framework (RMF) sustainment support in Washington, D.C., for a new contract. This role will serve as the primary Alternate Lead, with deep CSAM, RMF, authorization, FedRAMP, cloud, identity, and assessment expertise, being capable of assuming Lead ISSO duties without service degradation for the program.
Responsibilities will include, but not be limited to:
- Provide on-site cybersecurity and RMF sustainment support.
- Independently manage categorization, control selection, implementation evidence, assessment readiness, authorization, and monitoring.
- Develop and maintain SSPs, SAPs, SARs, POA&Ms, risk assessments, control statements, inheritance records, and evidence packages.
- Support FedRAMP-authorized cloud services, provider artifacts, customer responsibilities, CRMs, SRMs, and inherited controls.
- Support privacy controls, PTAs, PIAs, and systems processing PII.
- Pre-stage evidence and coordinate SCA interviews, walkthroughs, demonstrations, findings, and comment adjudication.
- Track ATO dates, conditions, milestones, open risks, and briefing materials for AO/AODR decisions.
- Produce accurate, concise, and audit-ready Government cybersecurity documentation.
- Support team coverage from 7:00 a.m. to 6:00 p.m. ET (M-F) and participate in after-hours incident coverage as needed.
Minimum Qualifications:
- U.S. Citizenship.
- Eligibility to obtain a Tier 4 High-Risk Public Trust.
- Minimum seven (7) years of cybersecurity.
- Minimum five (5) years in federal RMF, A&A, ISSO, or authorization work.
- Working knowledge of NIST SP 800-37, 800-53, 800-53B, FIPS 199, FISMA, and applicable CISA/OMB guidance.
- Familiarity with GRC, ITSM, SIEM, scanner, identity, endpoint and cloud-security platforms.
- Hands-on CSAM experience supporting system profiles, controls, evidence, POA&Ms, and authorization workflows.
- Experience with Azure Government, Microsoft 365 GCC/GCC High, and cloud shared-responsibility models.
- Experience with Entra ID, Okta, privileged access, role assignments, and access recertification.
Preferred Qualifications:
- At least one current cybersecurity certification such as CISSP, CGRC, CISM, CRISC, Security+, SecurityX, CCSP, or GIAC.
Education:
- Associate’s degree in Cybersecurity, Information Technology, or related field. (Relevant experience may be considered in lieu of formal education.)
About this role
C3EL is hiring a Senior ISSO for on-site work in Washington, D.C., to lead Risk Management Framework sustainment and cybersecurity compliance for a federal contract. You'd serve as the primary alternate to the Lead ISSO, managing the full authorization lifecycle independently—from system categorization and control selection through assessment readiness, authorization, and ongoing monitoring. The role demands hands-on expertise across RMF documentation (SSPs, SAPs, SARs, POA&Ms), FedRAMP cloud services, identity platforms like Entra ID and Okta, and the ability to produce audit-ready Government cybersecurity materials while coordinating with assessors and authorization officials.
This position requires at least seven years in cybersecurity and five years specifically in federal RMF, A&A, or ISSO work. You'll need deep knowledge of NIST standards (800-37, 800-53, 800-53B), FISMA, and hands-on experience with CSAM tools, GRC platforms, and cloud environments—particularly Azure Government and Microsoft 365 GCC/GCC High. U.S. citizenship is mandatory, as is eligibility for a Tier 4 High-Risk Public Trust clearance. The role includes standard business hours (7 a.m.–6 p.m. ET, Monday–Friday) plus after-hours incident coverage as needed.
A current cybersecurity certification (CISSP, CGRC, CISM, or equivalent) is preferred. An associate's degree in cybersecurity or IT is expected, though relevant experience may substitute. This is a contract position contingent on contract award.
This role's local market on JobMinglr
Pay for this role
The employer didn't post a pay range for this role. That usually means pay is set in negotiation, which favors whoever arrives with numbers. Check ranges on comparable Senior Information System Security Officer (ISSO) postings in Washington, and analyze any offer before you accept it.
Before you apply, worth reading
How JobMinglr reads this job
Every listing here is scored against your profile before you apply: skills overlap, experience level, location and work arrangement, each weighted and explained. You see the score and the reasons, not just a list. How the matching works.