> Markdown version of [/jobs/ext/154212-it-security-specialist-iv-isso](https://www.wearedevelopers.com/jobs/ext/154212-it-security-specialist-iv-isso). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # IT Security Specialist IV - ISSO - **Company:** GAMA-1 Technologies - **Location:** Washington, DC, United States - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Cyber Security, Information Systems, Information Technology - **Published:** May 22, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=5c89b8a99bde0aa1 ## About the Role Do you have experience in Security risk assessment investigation?, Do you have a Bachelor's degree?, * Bachelor's degree in cybersecurity, information systems, computer science, or a related field * 7+ years of overall cybersecurity or information assurance experience * 7+ years of experience supporting RMF, ATO, SA&A, or related cybersecurity authorization activities within federal or regulated environments * Hands-on experience developing, managing, and maintaining SA&A packages in federal environments * Deep expertise in cybersecurity operations and strong knowledge of the ATO lifecycle * Strong understanding of continuous monitoring and federal cybersecurity compliance requirements * Demonstrated ability to manage cybersecurity risk across technical and non-technical stakeholders * Certifications such as CISA, CRISC, CISSP, or CGRC are required * Strong written and verbal communication skills with the ability to clearly articulate cybersecurity risk and compliance posture ## Description The IT Security Specialist IV - ISSO ensures systems remain secure, compliant, and mission-ready throughout their lifecycle by leading the development, execution, and maintenance of comprehensive Security Assessment and Authorization (SA&A) packages in a remote and on-site work environment. This role directly supports mission success by proactively managing cybersecurity risk, sustaining Authorization to Operate (ATO) status, and ensuring continuous alignment with federal security requirements. What You Will Do in This Role * Lead development, execution, and maintenance of SA&A packages across the system lifecycle * Manage system security documentation to ensure accuracy, completeness, and audit readiness * Oversee security control implementation, assessment coordination, and validation activities * Support continuous monitoring activities in alignment with federal requirements and organizational policy * Coordinate with system owners, engineers, auditors, and external assessors throughout SA&A and ATO processes * Maintain and manage Plan of Action and Milestones (POA&M), including tracking, prioritization, and remediation oversight * Guide stakeholders through SA&A and ATO processes, ensuring compliance, risk visibility, and timely authorization sustainment * Ensure systems remain in a continuous state of compliance and maintain an active ATO status ## Related Videos - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Microservices? Monoliths? An Annoying Discussion!](https://www.wearedevelopers.com/videos/970-microservices-monoliths-an-annoying-discussion) - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [Enabling intelligent logistics automation: home-grown Industrial IoT platform at Austrian Post](https://www.wearedevelopers.com/videos/2018-enabling-intelligent-logistics-automation-home-grown-industrial-iot-platform-at-austrian-post) - [One Pipeline, Three Regulator - SBOM Compliance for the Developer](https://www.wearedevelopers.com/videos/100169-one-pipeline-three-regulator-sbom-compliance-for-the-developer) - [Demystifying Crypto & Web3: A Technical Journey Through 15 Years of Innovation](https://www.wearedevelopers.com/videos/1516-demystifying-crypto-web3-a-technical-journey-through-15-years-of-innovation) ## Related Articles - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities) - [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks) - [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology)