> Markdown version of [/jobs/ext/4655377-information-systems-security-officer-isso-rmf-analyst](https://www.wearedevelopers.com/jobs/ext/4655377-information-systems-security-officer-isso-rmf-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Information Systems Security Officer (ISSO) / RMF Analyst

- **Company:** Command Post Technologies
- **Location:** Arlington, VA, United States
- **Experience:** Experienced
- **Contract:** Permanent contract
- **Skills:** Xacta, Microsoft Access, CompTIA Security+, Cyber Security, Information Systems, Information Security Management, Security Content Automation Protocol, Software Vulnerability Management, SARS Software Products, CIS Benchmarks, Vulnerability Analysis
- **Published:** November 10, 2026
- **Apply:** https://www.clearancejobs.com/jobs/9301492/information-systems-security-officer-isso-rmf-analyst

## About the Role

* Final DoD Secret security clearance, with the ability to meet additional task-order security requirements.
 * Minimum of 3 years of experience supporting information system security, RMF, cybersecurity compliance, or assessment and authorization activities.
 * Working knowledge of NIST SP 800-53, DoDI 8510.01, and DoD RMF processes.
 * Experience developing or maintaining cybersecurity authorization documentation, including SSPs, POA&Ms, and security control assessments.
 * Familiarity with vulnerability management, security configuration compliance, and continuous monitoring.
 * Ability to analyze cybersecurity requirements and communicate compliance findings to technical and nontechnical stakeholders.
 * Strong technical writing, documentation management, and organizational skills., * Experience supporting classified DoD systems, Intelligence Community environments, or Special Access Programs.
 * Experience using eMASS, Xacta, ACAS, STIG Viewer, SCAP, or comparable RMF and compliance tools.
 * CompTIA Security+, CAP/CGRC, CISSP, CISM, or comparable security certification.
 * Familiarity with JSIG, ICD 503, CNSSI 1253, and specialized security authorization processes.
 * Experience supporting CCRIs, CCORIs, or other DoD cybersecurity inspections.
 * Experience coordinating with Information System Security Managers (ISSMs), Authorizing Officials (AOs), and Security Control Assessors (SCAs).
 * Prior experience supporting DARPA or another DoD research and development organization.

Work Location and Schedule

Anticipated work location is Arlington, VA. Specific work schedules, onsite requirements, and travel will be determined by individual task orders.

This requisition supports anticipated task-order opportunities under an awarded contract vehicle. Employment is contingent upon task-order award, funding, and position availability.

## Description

* Support implementation and maintenance of the DoD Risk Management Framework (RMF) across assigned information systems.
 * Develop, review, and maintain cybersecurity authorization documentation, including System Security Plans (SSPs), Security Assessment Reports (SARs), Plans of Action and Milestones (POA&Ms), and related security artifacts.
 * Assist with system assessment and authorization activities, including security control identification, implementation, assessment, and continuous monitoring.
 * Review vulnerability scan results, configuration assessments, and compliance findings to identify and track security risks.
 * Support implementation and validation of DISA Security Technical Implementation Guides (STIGs), security baselines, and applicable DoD cybersecurity directives.
 * Coordinate with system administrators, engineers, security control assessors, and Government security personnel to address cybersecurity requirements.
 * Maintain documentation supporting system interconnections, contingency planning, incident response, and continuous monitoring strategies.
 * Track remediation activities and coordinate updates to cybersecurity compliance records.
 * Support security audits, inspections, and assessments by preparing documentation and providing technical information.
 * Evaluate changes to systems, configurations, and security requirements for potential impacts to authorization and compliance.