ISSE SME

PRISM is seeking an experienced ISSE SME to lead cybersecurity, risk management, and compliance across diverse government environments, including cloud platforms (GovCloud), virtual workspaces, and DevSecOps pipelines. This role bridges technical security implementation with regulatory policy, maintaining accreditation under DoD RMF and NIST guidance.

Key Responsibilities:

• RMF/Compliance Leadership: Manage the Risk Management Framework (RMF) lifecycle (categorization, assessment, ATO) and develop key documentation (SSPs, SARs, POA&Ms).
• Security Implementation: Collaborate with engineering teams (cloud, DevSecOps, infrastructure) to embed security controls in virtualized and containerized environments, ensuring alignment with Zero Trust and ICAM principles.
• Continuous Monitoring: Support continuous monitoring, vulnerability mitigation, and compliance for various baselines, including FedRAMP and DoD Cloud standards.
• Coordination: Facilitate necessary approvals (BCAP/SNAP) and coordinate with ISSOs, AOs, and system owners to maintain Authority to Operate (ATO).
• Team Management: Manage the ISSE team, translating security needs into appropriate FISMA boundaries.

Qualifications:

• Experience & Education: 12+ years overall experience (or a Bachelor's + 10 years) in cybersecurity engineering, RMF, and information assurance.
• Clearance: Must have an active Secret Clearance.
• Policy Expertise: Expert knowledge of DoD RMF, NIST SP 800-series, FISMA, and Zero Trust.
• Technical Domains (Experience Required): Demonstrated experience with Cloud/Virtualization (GovCloud), DevSecOps/ICAM, Network Security, and Continuous Monitoring tools.
• Certifications: Required: CCISO, CISM, CISSP (or Associate), or GSLC.
• Soft Skills: Strong communication; ability to translate technical configs to compliance documentation.