Sr ISSO/RMF Lead - USSF XC3

If you are unable to complete this application due to a disability, contact this employer to ask for an accommodation or an alternative application process. 6 days ago Requisition ID: 1194 Overview Silotech Group, Inc. is a Woman-Owned Small Business (WOSB) and Service-Disabled Veteran-Owned Small Business (SDVOSB) headquartered in San Antonio, Texas. We deliver full-spectrum cybersecurity, digital transformation, cloud migration, DevSecOps, and emerging technology Research and Development (R&D) solutions across the Department of War (DoW), Intelligence Community (IC), Federal civilian, State, Local and Education (SLED), commercial, and international markets. Silotech Group is seeking a Senior Information Systems Security Officer (ISSO) / RMF Lead to own Risk Management Framework (RMF) execution and authorization outcomes for Silotech’s software product suite, including client Authorization to Operate (ATO) needs, Provisional Authorization to Operate (P-ATO) and FedRAMP Marketplace authorization strategy, and ATO support across Federal customers. This role is for an experienced security practitioner who can independently lead the P-ATO/Marketplace authorization strategy, own client-facing authorization relationships, and mentor junior ISSOs supporting the platform. The Senior ISSO partners closely with the assigned Program Manager and Information System Security Manager (ISSM), driving systems through Categorize, Select, Implement, Assess, Authorize, and Monitor activities across multiple concurrent cloud and on-prem environments, while owning audit-ready documentation. This position is well suited for someone who is self-directed, comfortable translating complex cloud and platform architecture (including Salesforce) into compliance language, and experienced operating in high-pressure authorization timelines. This position is contingent upon contract award. Location Remote / Hybrid (US Domestic). Occasional travel to client sites may be required. Clearance Essential Role and Responsibilities Lead execution of the RMF lifecycle across application environments, including SSP authorship, control implementation, and assessment activities, in partnership with the assigned Program Manager and ISSM Own and drive Silotech's software product suite Provisional ATO (P-ATO) and FedRAMP Marketplace authorization strategy, including preparation and submission of P-ATO, ATO, IATT, and FedRAMP High baseline packages Serve as the client-facing authorization lead for ATO engagements and ATO support for application customers Own Plans of Action and Milestones (POA&Ms) through remediation and closure, driving prioritization with system owners Maintain ATO sustainment across multiple concurrent cloud and on-prem environments Direct vulnerability scanning (e.g., ACAS/Nessus) and STIG compliance reviews, driving remediation and risk decisions Lead Information Security Continuous Monitoring (ISCM) and Continuous ATO activities to sustain authorization posture Own system records within eMASS, Xacta, or other GRC/RMF tracking tools Define and defend system Authorization Boundaries, minimizing scope and data ingress/egress risk Design phishing-resistant IAM controls aligned to federal identity mandates (e.g., AAL3/IAL3) Partner with system owners, engineers, and compliance stakeholders on system boundaries and technical dependencies Present security posture, risk status, and compliance metrics directly to the Program Manager, ISSM, and AO, including Monthly Status Reports (MSRs) and PMR cybersecurity updates Mentor junior ISSOs and contribute to a team culture of continuous improvement, transparency, and accountability What You'll Work On P-ATO and FedRAMP Marketplace authorization strategy, plus client ATO engagements, in partnership with the Program Manager ATO sustainment across multiple concurrent cloud and on-prem environments eMASS/Xacta system records and POA&M ownership Translating cloud and platform architecture (including Salesforce) into compliance-ready documentation Security metrics, risk reporting, Monthly Status Reports/PMR updates, and continuous improvement initiatives Mentoring junior ISSOs and using AI-assisted tools to streamline documentation and compliance tracking Required Qualifications Bachelor's degree in Information Systems, Cybersecurity, Computer Science, or a related field required; Master's degree in Cybersecurity or Information Assurance preferred 7+ years of experience in information systems security, with demonstrated leadership across the full RMF lifecycle Experience leading systems to FedRAMP High, DoD IL4/IL5, P-ATO/FedRAMP Marketplace authorization, or equivalent high-impact baseline authorization Strong working knowledge of NIST SP 800-37, NIST SP 800-53, NIST SP 800-171, FedRAMP, DoDI 8510.01, DFARS, and DoD/Federal cybersecurity policy DoD 8570/8140 (AFMAN 17-1303) compliant IAM Level II/III certification required (e.g., Security+ CE, CISM, CISSP, CySA+) Top Secret clearance preferred; Secret clearance minimum required Eligibility to obtain and maintain Common Access Card (CAC) access Comfortable using AI-assisted tools (e.g., ChatGPT, Claude) to support documentation, reporting, and process efficiency Demonstrated ability to operate within compliance and quality frameworks such as CMMC Level 2, ISO 27001:2022, ISO/IEC 20000-1:2018, ISO 9001:2015, and CMMI Dev/3 Strong executive-level communication skills and a track record of mentoring junior security staff Willingness to travel occasionally to client sites. Preferred Qualifications CISSP or CISM certification CMMC-RP or CMMC-RPA (Cybersecurity Maturity Model Certification - Registered Practitioner / Registered Practitioner Advanced) CompTIA PenTest+ and/or Certified Security Analytics Professional CompTIA Network Security Professional and/or Network Vulnerability Assessment Professional Certified in Cybersecurity (CC), ISC2 Hands‑on experience with eMASS or Xacta Experience with Salesforce Government Cloud architecture Experience supporting Continuous ATO or Assessment and Authorization (A&A) programs Self‑directed, with strong ownership over authorization outcomes Detail‑oriented and organized, especially when managing documentation and control evidence Comfortable presenting risk posture and compliance status to program leadership, clients, and the AO Strong listening and communication skills with both technical and non-technical stakeholders Adaptable and calm under high-pressure authorization timelines and shifting priorities Comfortable with occasional travel to support client engagements Equal Opportunity Employer Statement Silotech Group, Inc. is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, marital status, protected veteran status, disability status, or any other characteristic protected by federal, state, or local law. Silotech Group participates in E-Verify. Reasonable accommodations available upon request. Silotech strongly encourages applications from veterans, military spouses, and members of the Reserve and National Guard. #J-18808-Ljbffr Silotech Group