Own the full RMF lifecycle from system categorization through ATO and continuous monitoring
Author and maintain SSPs, POA&Ms, SARs, and SCTM documentation
Coordinate with government AOs, SCAs, and ISSOs across programs
Manage NIST SP 800-53 control implementation, testing, and evidence collection
Govern the security posture of AI and ML systems operating within classified enclaves
Assess novel risks introduced by LLMs and agentic workflows in DoW environments
Apply DISA STIGs and DoW cloud SRG requirements across IL4–IL6 deployments
Support JSIG and ICD 503 requirements where SAP/SCI accreditation applies
Interpret evolving guidance — CMMC 2.0, NSM-8, DoW AI Ethics Principles — and translate into action before it becomes mandatory
Define security approval pathways for AI tools where none yet exist
Build lightweight security review processes that enable engineering teams rather than blocking them
Serve as the primary liaison with government ISSOs, AOs, and DCSA representatives
Communicate risk clearly to non-security audiences including engineers and program leads
Mentor junior ISSOs and build security-awareness culture across the organization

5+ years as an ISSM or ISSO on DoW classified programs
End-to-end RMF experience per NIST SP 800-37, including ATO package preparation
Fluency in NIST SP 800-53 control families and NIST SP 800-171 CUI handling
Hands-on experience with eMASS or XACTA and DISA STIG compliance tooling
Active TS/SCI clearance; CI Polygraph preferred
DoD 8140 IAM Level III certification (CISSP, CAP, CISM, or CASP+)
Genuine curiosity about AI and enthusiasm for what it makes possible in the national security mission.

Information System Security Manager – ISSM

Key skills