Lead Information System Security Officer (ISSO)
C3EL
Salary undisclosed
Need a reasonable accommodation to apply or interview? Contact us.
JobMinglr uses automated technology to recommend jobs based on profile information and job preferences. Match Score does not determine eligibility for a position, prevent a user from viewing or applying to a job, or make hiring decisions on behalf of an employer.
Description
**CONTINGENT UPON CONTRACT AWARD**
Overview:
Job Title: Lead Information System Security Officer (ISSO)
Security Clearance: Ability to Obtain Tier 4 High-Risk Public Trust
Location: Washington, D.C.
(Due to the nature of the work and contract requirements, U.S. Citizenship is required.)
Description:
C3EL is seeking a Lead Information System Security Officer (ISSO) to provide on-site cybersecurity and Risk Management Framework (RMF) sustainment support in Washington, D.C., for a new contract. This role will serve as the single point of accountability for technical performance and remain a hands-on cybersecurity practitioner as the technical leader, Government interface, and quality authority for the entire ISSO program.
Responsibilities will include, but not be limited to:
- Provide on-site cybersecurity and RMF sustainment support.
- Chair internal quality reviews and ensure deliverables are complete, current, consistent, timely, and audit ready.
- Manage technical risks, issues, escalations, SLA/KPI/AQL performance, action items, and corrective actions.
- Support weekly reports, monthly status reports, and quarterly executive reviews, including authorization, vulnerability, POA&M, audit, and staffing status.
- Lead a team of two Senior ISSOs and maintain coverage during absence, vacancy, surge, or suitability delay.
- Produce accurate, concise, and audit-ready Government cybersecurity documentation.
- Support team coverage from 7:00 a.m. to 6:00 p.m. ET (M-F) and participate in after-hours incident coverage as needed.
Minimum Qualifications:
- U.S. Citizenship.
- Eligibility to obtain a Tier 4 High-Risk Public Trust.
- Minimum ten (10) years in cybersecurity.
- Minimum seven (7) years in federal RMF/ISSO work.
- Minimum three (3) years leading ISSO or authorization teams.
- Hands-on CSAM experience supporting system profiles, controls, evidence, POA&Ms, and authorization workflows.
- Working knowledge of NIST SP 800-37, 800-53, 800-53B, FIPS 199, FISMA, and applicable CISA/OMB guidance.
- Familiarity with GRC, ITSM, SIEM, scanner, identity, endpoint, and cloud-security platforms.
- Direct experience briefing and coordinating with ISSMs, CISOs, AOs, AODRs, System Owners, assessors, and senior Government officials.
- Direct experience overseeing SSPs, SAPs, SARs, POA&Ms, risk assessments, control statements, and evidence packages.
- Expert knowledge of all seven RMF steps, ATO, reauthorization, ongoing authorization, control baselines, and inheritance.
- Working proficiency with ServiceNow, Splunk, and vulnerability-scanning platforms.
Preferred Qualifications:
- At least one current cybersecurity certification such as CISSP, CGRC, CISM, CRISC, Security+, SecurityX, CCSP, or GIAC.
Education:
- Associate’s degree in Cybersecurity, Information Technology, or related field. (Relevant experience may be considered in lieu of formal education.)
About this role
C3EL is filling a Lead ISSO position in Washington, D.C. on a new federal contract, contingent upon contract award. This is a hands-on technical leadership role requiring you to be the single point of accountability for cybersecurity and Risk Management Framework sustainment across the entire program. You'll chair quality reviews, manage technical risks and escalations, oversee RMF documentation and authorization workflows, and serve as the primary Government interface—all while maintaining direct involvement in cybersecurity work rather than stepping into pure management.
The role demands substantial federal experience: at least ten years in cybersecurity overall, seven years specifically in federal RMF and ISSO work, and three years leading ISSO or authorization teams. You'll need hands-on expertise with CSAM tools, deep knowledge of NIST standards and FISMA requirements, and direct experience coordinating with ISSMs, CISOs, Authorizing Officials, and senior Government staff. Proficiency with ServiceNow, Splunk, and vulnerability scanners is required; relevant certifications like CISSP or CGRC are preferred.
You'll lead two Senior ISSOs, support coverage from 7 a.m. to 6 p.m. ET Monday through Friday, and participate in after-hours incident response as needed. U.S. citizenship and eligibility for a Tier 4 High-Risk Public Trust clearance are mandatory. This is an in-office contract position suited to someone with substantial federal cybersecurity depth who wants to lead a small team while staying technically engaged.
This role's local market on JobMinglr
Pay for this role
The employer didn't post a pay range for this role. That usually means pay is set in negotiation, which favors whoever arrives with numbers. Check ranges on comparable Lead Information System Security Officer (ISSO) postings in Washington, and analyze any offer before you accept it.
Before you apply, worth reading
How JobMinglr reads this job
Every listing here is scored against your profile before you apply: skills overlap, experience level, location and work arrangement, each weighted and explained. You see the score and the reasons, not just a list. How the matching works.