Information Systems Security Officer
Read straight from Resource Management Concepts, Inc.'s careers page, verified 1d ago.Seekless can tailor your résumé to it.
Seekless can write your résumé for this posting first.
Before you apply
LocationCharleston, South Carolina, United States
Typefull-time
SenioritySenior
Experience5+ yrs
DepartmentInformation Technology
Company size201–500 people
PostedOct 30, 2026 · 6d ago
Verified live1d ago
At a glanceSummarised by Seekless from the posting.
Bachelor's degree in a technical or managerial field and 5+ years of cybersecurity, engineering, T&E, or A&A experience; or high school diploma/equivalent and more than 7 years of relevant experience
Active TS/SCI clearance with CI Polygraph
Prior Intelligence Community support experience
ISSO or comparable experience supporting RMF activities and system authorization packages
Proficiency with eMASS and ACAS
Experience documenting security controls, collecting assessment evidence, reviewing vulnerability and configuration findings, and tracking remediation
Knowledge of applicable Department of War and Intelligence Community security requirements and assessment processes
Understanding of system boundaries, data flows, access controls, audit logging, configuration management, and continuous monitoring
Ability to assess system-change risks and communicate them to technical and nontechnical stakeholders
Strong technical writing, organizational, and communication skills
DoD 8140/8570 IAM Level II or III qualifications and relevant certifications, such as CISSP, CISM, or CAP/CGRC
IC authorization experience under ICD 503 and agency guidance
AWS/AWS GovCloud security assessment experience, including DoD Impact Level 5 environments
Familiarity with Kubernetes/OpenShift security, including workload isolation, access controls, image security, and logging
Experience using DevSecOps security testing and deployment evidence for assessments and continuous monitoring
Experience applying STIGs, validating configurations, and supporting security control assessments
Familiarity with ICAM, PKI, certificate management, encryption, and secrets management
Experience assessing Zero Trust controls across identities, devices, networks, applications, and data
Ability to meet applicable cybersecurity workforce requirements, including Full Security Control Assessor qualification if required
This position is contingent on contract award and position availability
Skills
eMASS
ACAS
AWS
AWS GovCloud
Kubernetes
OpenShift
DevSecOps
STIGs
ICAM
PKI
Zero Trust
Benefits
Health insurance
401(k)
Tuition assistance
Paid vacation
Pet insurance
This position is contingent on contract award and position availability
About the company
Resource Management Concepts, Inc. (RMC) provides high-quality, professional services to government and commercial sectors. Our mission is to deliver exceptional management and technology solutions supporting the protection and preservation of the people and environment of the United States of America.
About the role
RMC is seeking an Information Systems Security Officer (ISSO) to support the authorization and ongoing security of mission applications, cloud infrastructure, and enterprise core services. The ISSO will work with Government security personnel, software developers, and infrastructure engineers to maintain security documentation, assess risk, and ensure systems meet applicable Department of Defense and Intelligence Community requirements.
This role requires someone who can connect security requirements to how systems are built and operated. Candidates should be comfortable reviewing technical evidence, investigating compliance gaps, and working with engineers to resolve findings as software, infrastructure, and system configurations change.
What You’ll Do:
•
Support Risk Management Framework (RMF) activities to obtain and maintain Authority to Operate (ATO) for systems across applicable classification levels.
•
Develop and maintain authorization documentation, including System Security Plans (SSPs), security control implementation statements, system boundary descriptions, and supporting evidence.
•
Coordinate with system owners, Information System Security Managers (ISSMs), assessors, and engineering teams to prepare authorization packages and resolve assessment findings.
•
Maintain Plans of Action and Milestones (POA&Ms), track remediation progress, and communicate unresolved risks and dependencies.
•
Use the DISA Enterprise Mission Assurance Support Service (eMASS) to maintain authorization records, security control documentation, assessment evidence, and remediation status, as applicable.
•
Review Assured Compliance Assessment Solution (ACAS) scan results, security configuration assessments, and application security testing reports; work with technical teams to prioritize and validate remediation.
•
Assess the security impact of software releases, infrastructure changes, new integrations, and changes to the authorization boundary.
•
Support continuous monitoring by maintaining current security evidence, reviewing control effectiveness, and reporting changes in system risk.
•
Work with cloud and DevSecOps engineers to incorporate security requirements and evidence collection into development and deployment workflows.
•
Review access controls, privileged access, audit logging, configuration baselines, and protection of sensitive data.
•
Support security incident reporting, investigation, corrective actions, and updates to relevant documentation and procedures.
•
Apply appropriate security overlays and support supply chain risk management activities.
•
Prepare security status reports and brief Government stakeholders on authorization progress, findings, and remediation priorities.
Requirements
•
Bachelor’s degree in a technical or managerial field and 5+ years of cybersecurity, engineering, T&E, or A&A experience; or a high school diploma/equivalent and more than 7 years of relevant experience.
•
Active TS/SCI clearance with CI Polygraph.
•
Prior Intelligence Community support experience.
•
ISSO or comparable experience supporting RMF activities and system authorization packages.
•
Proficiency with eMASS and ACAS.
•
Experience documenting security controls, collecting assessment evidence, reviewing vulnerability and configuration findings, and tracking remediation.
•
Knowledge of applicable Department of War and Intelligence Community security requirements and assessment processes.
•
Understanding of system boundaries, data flows, access controls, audit logging, configuration management, and continuous monitoring.
•
Ability to assess system-change risks and communicate them to technical and nontechnical stakeholders.
•
Strong technical writing, organizational, and communication skills.
•
Ability to meet applicable cybersecurity workforce requirements, including Full Security Control Assessor qualification if required.
Desired Qualifications
•
DoD 8140/8570 IAM Level II or III qualifications and relevant certifications, such as CISSP, CISM, or CAP/CGRC.
•
IC authorization experience under ICD 503 and agency guidance.
•
AWS/AWS GovCloud security assessment experience, including DoD Impact Level 5 environments.
•
Familiarity with Kubernetes/OpenShift security, including workload isolation, access controls, image security, and logging.
•
Experience using DevSecOps security testing and deployment evidence for assessments and continuous monitoring.
•
Experience applying STIGs, validating configurations, and supporting security control assessments.
•
Familiarity with ICAM, PKI, certificate management, encryption, and secrets management.
•
Experience assessing Zero Trust controls across identities, devices, networks, applications, and data.
Benefits
At RMC, we’re committed to your career growth! RMC differentiates itself from other firms through its investment in our employees. We invest our resources to train, certify, educate, and build our employees.
RMC can offer you a great place to work with a small company feel and give you the experience, tuition assistance, and certifications that will take your career to the next level. This also includes a competitive paid vacation package with 11 paid federal holidays. Additionally, we also offer high-quality, low-deductible healthcare plans, pet insurance, and a competitive 401K package.
Salary at RMC is determined by various factors, including but not limited to location, a candidate’s specific combination of education, knowledge, skills, competencies, and experience, as well as contract-specific requirements.
More roles at Resource Management Concepts, Inc.