ISSO (Clearance Required)

Deloitte • Gilbert, AZ

7d • $86,700 - $115,600 • Hybrid

About The Position

Deloitte is seeking an ISSO Senior Consultant to join its Cyber Strategy and Transformation team at the Gilbert, Arizona Delivery Center. The role provides analytical and coordination support for Risk Management Framework (RMF), authorization, and continuous monitoring activities. The ISSO helps keep assigned systems audit-ready and authorization-ready by maintaining documentation and status trackers, organizing evidence, supporting reporting, and tracking compliance and remediation work.

The position also supports annual assessments, continuous monitoring actions, and change-driven reviews, as well as monitoring, detection, investigation, and remediation activities through log review, security testing, authorization package development, and audit support. The role is part of Deloitte’s Government & Public Services practice and Cyber Strategy & Transformation offering, which helps clients develop and transform cyber programs aligned with strategic objectives, regulations, and risk appetite.

This is a Deloitte US Delivery Center role with a hybrid work model. The employee must live within commuting distance of the Gilbert, AZ location and may spend up to 30% of working time co-located at an assigned office or other approved location. Overnight travel is capped at 10%. If relocation is necessary, the move must be completed within 12 weeks from the start date. The compensation estimate is $86,700–$115,600, with possible eligibility for a discretionary annual incentive program.

Requirements

• Bachelor’s degree in Cybersecurity, Computer Science, Identity Management Systems, or a related field.
• Must be legally authorized to work in the United States without employer sponsorship now or in the future.
• Active Secret security clearance.
• At least 3 years of experience with a Governance, Risk, and Compliance (GRC) tool in relation to DoD.
• At least 3 years of experience with RMF and security engineering.
• At least 3 years of experience supporting the full RMF lifecycle and federal Assessment and Authorization process, including mapping, implementing, interpreting, and documenting RMF security controls.
• At least 3 years of experience ensuring compliance with NIST RMF and NIST Special Publication 800-53, and performing threat assessments aligned with RMF lifecycle processes.
• At least 3 years of experience managing POA&Ms, conducting Security Tests and Evaluations (ST&E), and creating system security documentation.
• At least 2 years of experience with security and compliance for federal or DoD systems.
• At least 2 years of experience with vulnerability and patch management within the federal government or DoD.
• Ability to work independently and collaboratively as part of a team.
• Effective written and verbal communication skills, strong technical writing capabilities, and meticulous attention to detail and quality.
• Ability to build and sustain professional relationships and maintain a professional demeanor.
• Ability to lead projects or workstreams and provide clear guidance to others.
• Ability to manage and prioritize multiple tasks in a fast-paced, dynamic environment and meet deadlines.
• Must reside within commuting distance of the Gilbert, AZ US Delivery Center under the hybrid work model; if relocation is necessary, complete it within 12 weeks from the start date.
• Able to meet the role’s travel requirement of no more than 10% overnight travel.

Nice To Haves

• Experience with FedRAMP authorizations.
• Experience with native cloud security architecture in Azure or AWS.
• Experience performing authorizations and risk assessments and supporting third parties.
• Experience with manual STIGs, Security Content Automation Protocol (SCAP), and SCAP Compliance Checker (SCC).
• Experience conducting Splunk log reviews to support monitoring, detection, investigation, and remediation of security events and potential vulnerabilities.
• Prior technical experience as a system or network administrator.

Responsibilities

• Maintain RMF documentation, system status trackers, and supporting records for assigned systems.
• Assist with collecting, validating, and organizing evidence for assessments and authorization package readiness.
• Track POA&M status, documentation progress, control compliance, and remediation activities.
• Support preparation of dashboards, reports, and stakeholder summaries on authorization health and risk status.
• Assist with annual assessments, continuous monitoring actions, and change-driven reviews.
• Coordinate meetings, capture action items, and maintain auditable records in shared repositories.
• Support monitoring, detection, investigation, and remediation activities through log review, security testing, authorization package development, and audit support.
• Provide analytical and coordination support for RMF, authorization, and continuous monitoring activities, helping keep assigned systems audit-ready and authorization-ready.

Benefits

• Possible eligibility to participate in a discretionary annual incentive program.
• Broad range of employee benefits; specific benefits are not detailed in the posting.
• Professional development opportunities, including on-the-job learning, formal development programs, leadership opportunities, and mentorship.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior