ISSO

Scott Air Force Base, United States | Posted on 07/02/2026

• Own theday-to-day security authorization posture of assigned DoD information systems
• Work within awell-resourced team with dedicated engineering, operations, and architecturesupport
• Directly supportmission continuity by managing ATO packages and continuous monitoring programs
• Grow into asenior GRC role with clear advancement pathways

Responsibilities

• Develop,maintain, and update System Security Plans (SSPs) for assigned systems
• Manage POA&Msfrom identification through remediation and closure
• Compile andsubmit Authorization to Operate (ATO) packages
• Utilize eMASS forGRC management and RMF workflow tracking
• Coordinate withISSEs and SecOps to validate control implementations
• Develop SecurityAssessment Plans (SAPs) and support SAR coordination
• Draft supplychain risk management plans
• Support theCybersecurity Architect with RMF strategic planning

Qualifications

Required:

• 3–5 years ofRMF/ATO experience within DoD or federal environments
• Hands-onexperience with eMASS
• Working knowledgeof NIST SP 800-53r5 and DoD RMF processes
• Demonstratedability to independently author SSPs and manage POA&Ms

Required Certification:

Desired Certification:

• DoD M DCWFIntermediate tier certification — one of: CEH(P), RCCE Level 1, Cloud+, CPTE,FITSP-A, GCED, GCIH, GCSA, GICSP, GSEC, PenTest+, or Security+

Required Education:

• DoD 8140 InterimEducation Options

Desired Education:

• Bachelor’s degreein Computer Science, Cybersecurity, Data Science, Information Systems,Information Technology, or Software Engineering
• Experience witheMASSer or similar RMF automation tooling
• Exposure tocloud-hosted or hybrid system authorization boundaries
• Familiarity withthe DoD RMF Knowledge Service