ISSM - ATO Program Lead (ECS/MNS)

Tlingit Haida Tribal Business Corporation•Atlanta, GA

2d•Hybrid

About The Position

The ATO Program Lead (Information System Security Manager) provides cybersecurity leadership for the successful authorization, accreditation, and lifecycle management of systems supporting the Emergency Communication System (ECS) and Mass Notification System (MNS) modernization program. The role serves as the primary cybersecurity advisor responsible for Risk Management Framework (RMF) execution, Authority to Operate (ATO) activities, continuous monitoring, and cybersecurity compliance across the program.

Requirements

10+ years supporting cybersecurity, information assurance, or federal information systems.
5+ years serving as an ISSM, Senior ISSO, Cybersecurity Lead, or equivalent role supporting Authority to Operate (ATO) efforts.
Experience supporting mission-critical communications, emergency communications, or critical infrastructure systems.
Demonstrated experience leading RMF packages through the ATO process for DoD or other federal agencies.
Experience with NIST Risk Management Framework (RMF), NIST SP 800-37, NIST SP 800-53, DISA STIGs, Security Technical Implementation Guides, and continuous monitoring.
Experience using Enterprise Mission Assurance Support Service (eMASS) or comparable authorization management systems.
Strong understanding of cybersecurity governance, vulnerability management, system hardening, and risk management.
Experience coordinating with Government Authorizing Officials (AO), Security Control Assessors (SCA), ISSOs, ISSEs, and Program Managers.
Excellent written and verbal communication skills with the ability to communicate cybersecurity risks to both technical and executive stakeholders.
Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Information Systems, or related field; equivalent experience considered.
Must be able to obtain and maintain required Government security or facility access credentials.
Proficiency in Microsoft Office Suite (Word, Excel, Outlook); experience with work order systems such as Maximo preferred.
Must be able to maintain the ability to access the government worksite.
Must possess and maintain a valid state driver’s license and a safe driving record, in accordance with company policy, to operate vehicles or equipment as required for the position.

Nice To Haves

Experience with Emergency Communication Systems (ECS), Mass Notification Systems (MNS), fire alarm systems, building automation systems, or critical infrastructure modernization.
Knowledge of NFPA 72, voice evacuation systems, Giant Voice, telecommunications, or enterprise network infrastructure
Previous experience leading multiple ATOs or enterprise cybersecurity programs.

Responsibilities

Lead all Authority to Operate (ATO) activities throughout the system lifecycle.
Serve as the Information System Security Manager (ISSM) supporting cybersecurity governance for the program.
Manage implementation of the NIST Risk Management Framework (RMF) and applicable DoD cybersecurity requirements.
Coordinate with Government Authorizing Officials (AO), ISSOs, ISSEs, cybersecurity assessors, and program leadership throughout the authorization process.
Oversee development, review, and maintenance of RMF documentation including System Security Plans (SSPs), POA&Ms, Security Assessment Reports (SARs), Continuous Monitoring Plans, and supporting authorization artifacts.
Ensure compliance with DoD cybersecurity policies, NIST 800-series publications, DISA STIGs, and applicable federal security requirements.
Lead vulnerability management activities including remediation planning, risk acceptance, and security compliance reporting.
Support cybersecurity architecture reviews to ensure security requirements are incorporated into system design and implementation.
Advise project leadership on cybersecurity risks, mitigation strategies, and authorization status.
Coordinate security testing, assessment activities, and continuous monitoring efforts.
Support accreditation of interconnected systems and enterprise network integrations.
Performs other duties as assigned.