ISSO Portfolio Manager / Team Lead

Steampunk•McLean, VA

2d•$125,000 - $175,000•Hybrid

About The Position

Steampunk is seeking an ISSO Portfolio Manager / Team Lead to support a federal customer. This role is perfect for someone who blends strong cybersecurity expertise with exceptional customer engagement, coaching, and leadership skills. You’ll guide a team of ISSOs, partner closely with system owners and stakeholders, and deliver high‑quality security outcomes at speed across a dynamic portfolio.

Requirements

Master's degree and 6 years of relevant experience; OR Bachelor's degree and 8 years of relevant experience; OR No degree and 12 years of relevant experience
One of the following certifications which must be Active to support of the contract: CISSP, CASP, CISA, CISM, GSLC.
Strong knowledge of NIST RMF, FISMA, and modern security practices.
Prior experience as a supervisor or team lead, with demonstrated ability to manage, mentor, and develop staff
Experience with vulnerability management and reviewing systems against federal requirements.
Excellent communication skills and the ability to simplify security for non‑technical partners.
Experience cultivating teams and balancing quality, speed, and customer expectations.
Public Trust required.

Responsibilities

Lead, mentor, and develop a team of ISSOs to deliver high‑quality security support.
Serve as the primary point of coordination between ISSO teams and project/program managers to ensure security tasks are reflected accurately in project schedules and sprints.
Build strong relationships with system owners and stakeholders and position security as a customer‑oriented service.
Manage competing priorities across multiple systems while ensuring clear communication and timely delivery.
Operate effectively in Agile environments, using sprint‑based planning to prioritize ISSO work
Drive execution of ISSO-related project work across multiple systems, coordinating timelines, dependencies, and deliverables in partnership with program/project leads
Maintain accurate security records and workflows in JIRA, ServiceNow, and other modern tools.
Deliver technically accurate, polished, and timely security artifacts that meet program standards and enable “quality at speed.”
Oversee security authorization packages, continuous monitoring deliverables, audit readiness, data calls, and risk reporting.
Track vulnerabilities, guide remediation, and keep all systems “green” on the FISMA scorecard.
Identify blockers, communicate risks, and provide actionable mitigation recommendations.
Participate in SDLC/SLM activities and help teams integrate security early and effectively.
Deliver executive-level reporting and presentations to senior leadership or stakeholders
Train or facilitate sessions for moderate-sized groups (10–25+ people)
Contribute to the development or refinement of processes, standard operating procedures (SOPs), and templates for recurring security artifacts.
Assess workload trends across assigned systems and provide leadership with input on resource allocation, staffing needs, and hiring priorities.