ISSO Lead

ISSO Lead
The ISSO Lead is a senior cybersecurity governance and risk-management professional responsible for supporting federal information systems throughout the complete Risk Management Framework (RMF) lifecycle. This position leads ISSO activities across a large portfolio of systems, maintains authorization status, oversees security documentation, and advises system owners, ISSMs, and Authorizing Officials on cybersecurity risk.
Compensation & Benefits
Pay commensurate with experience.
Full-time benefits include Medical, Dental, Vision, 401K, and other possible benefits as provided. Benefits are subject to change with or without notice.
ISSO Lead Responsibilities Include:
- Lead ISSO, FISMA, RMF, and Assessment and Authorization activities for federal systems.
- Apply NIST SP 800-37, NIST SP 800-53, FIPS 199, and NIST SP 800-60 requirements.
- Support obtaining and maintaining Authorities to Operate (ATOs).
- Develop and maintain SSPs, POA&Ms, PIAs, DIRAs, ISAs, SARs, Security Assessment Plans, Incident Response Plans, Contingency Plans, and Security Impact Assessments.
- Track system lifecycles, authorization status, control implementation, vulnerabilities, and enterprise risks.
- Manage continuous-monitoring and annual FISMA reporting activities.
- Coordinate vulnerability remediation with system owners, engineering teams, assessors, SOC teams, and security operations contractors.
- Support federal audits, inspections, data calls, and security assessments.
- Prepare executive-level risk briefings, compliance reports, metrics, and recommendations.
- Lead or mentor ISSOs and maintain consistent security documentation across multiple systems.
- Perform other job-related duties as assigned.
ISSO Lead Experience, Education, Skills, Abilities Requested:
- Bachelor’s degree in cybersecurity, information technology, computer science, engineering, or a related field.
- Minimum of 8 years of relevant cybersecurity experience.
- CISSP, CISM, or equivalent senior-level cybersecurity certification.
- Active Top Secret (TS) security clearance is required. Candidates must possess the required clearance to be considered for this position.
- U.S. citizenship required.
- Experience leading ISSO, FISMA, RMF, or Assessment and Authorization activities for federal systems.
- Experience supporting large federal system portfolios preferred.
- Department of State or Bureau of Consular Affairs experience preferred.
- Familiarity with ArchAngel or another federal GRC platform preferred.
- Experience with Tenable Nessus, Wiz, iPost, vulnerability reporting, and POA&M tracking preferred.
- Understanding of DevSecOps, CI/CD security controls, cloud security, zero-trust requirements, and High Value Assets preferred.
- Must pass pre-employment qualifications of Cherokee Federal.

Company Information
Criterion is part of Cherokee Federal — the division of tribally owned federal contracting companies owned by Cherokee Nation Businesses. As a trusted partner supporting federal customers, Cherokee Federal companies are focused on solving complex challenges and serving the government’s mission
#CherokeeFederal #AppC
Similar searchable job titles:
- Lead Information System Security Officer
- Senior ISSO
- ISSO Manager
- Cybersecurity Governance Lead
- RMF Lead
- Senior A&A Lead
- Information System Security Manager
- Cybersecurity Risk and Compliance Lead.

Keywords:
- ISSO
- FISMA
- RMF
- ATO
- NIST 800-37
- NIST 800-53
- FIPS 199
- A&A
- SSP
- ArchAngel
- Tenable
Pipeline Position Notice:
This is a pipeline position intended to identify qualified candidates for anticipated future opportunities. This posting does not represent a current vacancy. Candidates who meet the qualifications may be contacted as positions become available and program requirements are finalized.