About the Role
Ortman Consulting is hiring a Lead ISSO (1 opening) to lead information system security support for a federal agency in Washington, DC. You'll own the RMF/authorization program across a FISMA-Moderate enterprise — directing continuous monitoring, POA&M management, and security-artifact governance in CSAM, and mentoring a small ISSO team. Hybrid (DC area). U.S. citizenship and Tier 4 High-Risk Public Trust eligibility required.
Requirements
Minimum Qualifications:
8+ years of cybersecurity experience, including hands-on RMF/ATO and continuous monitoring for FISMA-Moderate systems
Experience maintaining system authorization packages, POA&Ms, and control-inheritance documentation (CSAM, Xacta, or eMASS)
Strong working knowledge of NIST SP 800-53, NIST SP 800-37 (RMF), and FISMA; familiarity with FedRAMP concepts
Demonstrated ability to lead assessments, coordinate remediation with technical teams, and maintain audit-ready evidence
U.S. citizen; able to obtain and maintain a Tier 4 High-Risk Public Trust
Preferred:
CISSP, CISM, or CAP/CGRC certification
Prior Lead ISSO or ISSM experience at a federal civilian agency
Direct experience administering an enterprise GRC platform (CSAM, Xacta, or eMASS)
