Sr ISSO/RMF Lead - USSF XC3
About The Position
Silotech Group is seeking a Senior Information Systems Security Officer (ISSO) / RMF Lead to own Risk Management Framework (RMF) execution and authorization outcomes for Silotech’s software product suite, including client Authorization to Operate (ATO) needs, Provisional Authorization to Operate (P-ATO) and FedRAMP Marketplace authorization strategy, and ATO support across Federal customers. This role is for an experienced security practitioner who can independently lead the P-ATO/Marketplace authorization strategy, own client-facing authorization relationships, and mentor junior ISSOs supporting the platform. The Senior ISSO partners closely with the assigned Program Manager and Information System Security Manager (ISSM), driving systems through Categorize, Select, Implement, Assess, Authorize, and Monitor activities across multiple concurrent cloud and on-prem environments, while owning audit-ready documentation. This position is well suited for someone who is self-directed, comfortable translating complex cloud and platform architecture (including Salesforce) into compliance language, and experienced operating in high-pressure authorization timelines. This position is contingent upon contract award.
Requirements
- Bachelor's degree in Information Systems, Cybersecurity, Computer Science, or a related field required; Master's degree in Cybersecurity or Information Assurance preferred
- 7+ years of experience in information systems security, with demonstrated leadership across the full RMF lifecycle
- Experience leading systems to FedRAMP High, DoD IL4/IL5, P-ATO/FedRAMP Marketplace authorization, or equivalent high-impact baseline authorization
- Strong working knowledge of NIST SP 800-37, NIST SP 800-53, NIST SP 800-171, FedRAMP, DoDI 8510.01, DFARS, and DoD/Federal cybersecurity policy
- DoD 8570/8140 (AFMAN 17-1303) compliant IAM Level II/III certification required (e.g., Security+ CE, CISM, CISSP, CySA+)
- Top Secret clearance preferred; Secret clearance minimum required
- Eligibility to obtain and maintain Common Access Card (CAC) access
- Comfortable using AI-assisted tools (e.g., ChatGPT, Claude) to support documentation, reporting, and process efficiency
- Demonstrated ability to operate within compliance and quality frameworks such as CMMC Level 2, ISO 27001:2022, ISO/IEC 20000-1:2018, ISO 9001:2015, and CMMI Dev/3
- Strong executive-level communication skills and a track record of mentoring junior security staff
- Willingness to travel occasionally to client sites.
Nice To Haves
- CISSP or CISM certification
- CMMC-RP or CMMC-RPA (Cybersecurity Maturity Model Certification - Registered Practitioner / Registered Practitioner Advanced)
- CompTIA PenTest+ and/or Certified Security Analytics Professional
- CompTIA Network Security Professional and/or Network Vulnerability Assessment Professional
- Certified in Cybersecurity (CC), ISC2
- Hands-on experience with eMASS or Xacta
- Experience with Salesforce Government Cloud architecture
- Experience supporting Continuous ATO or Assessment and Authorization (A&A) programs
Responsibilities
- Lead execution of the RMF lifecycle across application environments, including SSP authorship, control implementation, and assessment activities, in partnership with the assigned Program Manager and ISSM
- Own and drive Silotech's software product suite Provisional ATO (P-ATO) and FedRAMP Marketplace authorization strategy, including preparation and submission of P-ATO, ATO, IATT, and FedRAMP High baseline packages
- Serve as the client-facing authorization lead for ATO engagements and ATO support for application customers
- Own Plans of Action and Milestones (POA&Ms) through remediation and closure, driving prioritization with system owners
- Maintain ATO sustainment across multiple concurrent cloud and on-prem environments
- Direct vulnerability scanning (e.g., ACAS/Nessus) and STIG compliance reviews, driving remediation and risk decisions
- Lead Information Security Continuous Monitoring (ISCM) and Continuous ATO activities to sustain authorization posture
- Own system records within eMASS, Xacta, or other GRC/RMF tracking tools
- Define and defend system Authorization Boundaries, minimizing scope and data ingress/egress risk
- Design phishing-resistant IAM controls aligned to federal identity mandates (e.g., AAL3/IAL3)
- Partner with system owners, engineers, and compliance stakeholders on system boundaries and technical dependencies
- Present security posture, risk status, and compliance metrics directly to the Program Manager, ISSM, and AO, including Monthly Status Reports (MSRs) and PMR cybersecurity updates
- Mentor junior ISSOs and contribute to a team culture of continuous improvement, transparency, and accountability
Benefits
- Silotech Group, Inc. is a Woman-Owned Small Business (WOSB) and Service-Disabled Veteran-Owned Small Business (SDVOSB)
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
