Lead ISSO / Technical Program Lead

Chameleon Integrated Services•Washington, DC

About The Position

We are a growing information technology company that offers its employees a culture of success, the chance to work on revolutionary federal IT infrastructure, and the opportunity to grow alongside cutting-edge technology that is reshaping the industry. We are seeking forward-thinking candidates that have strong experience in operational support and can help take to the next level in a proactive stance. Chameleon Integrated Services has expertise in operations management, quality systems, data operations and cybersecurity. We secure some of the most sensitive data for the Department of Defense and for other U.S. federal government agencies. We are known for the great care we take with clients and employees, and we believe in promoting from within.

Requirements

Must be a United States citizen.
Must be eligible for a Tier 4 High-Risk Public Trust investigation.
At least 10 years of progressively responsible cybersecurity experience.
At least 7 years supporting federal ISSO, information assurance, assessment and authorization, C&A, or RMF activities.
At least 3 years leading ISSOs, security control assessors, cybersecurity analysts, or authorization workstreams.
Led or materially directed authorization support for multiple systems or authorization boundaries concurrently.
Direct experience with NIST SP 800-37 and NIST SP 800-53.
Experience developing, reviewing, or approving: System Security Plans, Security control implementation statements, Security assessment plans and reports, POA&M records, Risk assessments, Authorization decision packages, Continuous Monitoring Plans, Security impact analysis.
Strong executive briefing and federal technical-writing skills.
One senior cybersecurity certification: CISSP, CISM, CGRC (formerly CAP), or GSLC.
Bachelor’s degree preferred. Extensive relevant federal RMF experience may substitute.

Nice To Haves

Direct CSAM experience
Civilian federal agency FISMA experience
Responsibility for FISMA Moderate systems
Azure Government, Microsoft 365 GCC, or GCC High experience
FedRAMP customer-responsibility and inherited-control analysis
Experience with ServiceNow, Splunk, Tenable, Qualys, Microsoft Defender, Entra ID, Okta, Palo Alto, or Zscaler
Experience supporting Inspector General, GAO, OMB CyberStat, CISA, or independent security-control assessments
Current Tier 4 or Tier 5 suitability
CISSP plus CGRC
Experience managing 20 or more systems or several simultaneous authorization events

Responsibilities

Serve as Chameleon’s single point of accountability for technical execution of the DFC ISSO program.
Direct day-to-day work, assign systems and workstreams, oversee authorization packages, chair internal deliverable reviews, manage technical risks and issues, and represent Chameleon before the DFC ISSM, CISO, AO/AODR, System Owners, assessors, and cybersecurity governance bodies.
This is a hands-on senior cybersecurity position.
The candidate must be capable of personally reviewing RMF artifacts, identifying technical and documentation defects, resolving conflicting security records, and defending recommendations before senior federal officials.
Experience coordinating with Authorizing Officials, ISSMs, System Owners, Common Control Providers, assessors, privacy personnel, and technical remediation teams.
Experience overseeing deliverable quality before Government submission.
Experience producing executive cybersecurity dashboards and quarterly risk briefings