IT Security Specialist IV - ISSO

The IT Security Specialist IV - ISSO ensures systems remain secure, compliant, and mission-ready throughout their lifecycle by leading the development, execution, and maintenance of comprehensive Security Assessment and Authorization (SA&A) packages in a remote and on-site work environment. This role directly supports mission success by proactively managing cybersecurity risk, sustaining Authorization to Operate (ATO) status, and ensuring continuous alignment with federal security requirements.

What You Will Do in This Role

• Lead development, execution, and maintenance of SA&A packages across the system lifecycle
• Manage system security documentation to ensure accuracy, completeness, and audit readiness
• Oversee security control implementation, assessment coordination, and validation activities
• Support continuous monitoring activities in alignment with federal requirements and organizational policy
• Coordinate with system owners, engineers, auditors, and external assessors throughout SA&A and ATO processes
• Maintain and manage Plan of Action and Milestones (POA&M), including tracking, prioritization, and remediation oversight
• Guide stakeholders through SA&A and ATO processes, ensuring compliance, risk visibility, and timely authorization sustainment
• Ensure systems remain in a continuous state of compliance and maintain an active ATO status

Do you have experience in Security risk assessment investigation?, Do you have a Bachelor’s degree?, * Bachelor’s degree in cybersecurity, information systems, computer science, or a related field

• 7+ years of overall cybersecurity or information assurance experience
• 7+ years of experience supporting RMF, ATO, SA&A, or related cybersecurity authorization activities within federal or regulated environments
• Hands-on experience developing, managing, and maintaining SA&A packages in federal environments
• Deep expertise in cybersecurity operations and strong knowledge of the ATO lifecycle
• Strong understanding of continuous monitoring and federal cybersecurity compliance requirements
• Demonstrated ability to manage cybersecurity risk across technical and non-technical stakeholders
• Certifications such as CISA, CRISC, CISSP, or CGRC are required
• Strong written and verbal communication skills with the ability to clearly articulate cybersecurity risk and compliance posture

Pulled from the full job description

• 401(k)
• Health insurance
• Paid time off
• Disability insurance
• Paid holidays
• Opportunities for advancement

GAMA-1 is a rapidly growing technology business that is based in Greenbelt, Maryland. GAMA-1 Technologies provides strategic information assurance, information security, and business enterprise and networking solutions to the Federal Government. Our success is based on using industry and agency standards, establishing and performing with standardized processes, and IT Services expertise. At GAMA-1, we believe employees should grow, achieve, and develop just as the company grows, achieves, and develops. GAMA-1 is committed to providing our employees with opportunities for career advancement throughout their employment. For more information, visit www.gama1tech.com.