Job description

Driven by Innovation and built on Trust, rockITdata is a unique SDVOSB services company that partners with leading commercial healthcare/life sciences organizations on cutting edge innovations - think AI, automation and data transformation. We then bring those commercially tested solutions to government entities to deliver predictable, measurable impact for the American taxpayer and consumer. Join rockITdata as a Cybersecurity SME / Information System Security Officer (ISSO) supporting one of the nation's largest federal healthcare modernization initiatives. In this role, you'll lead cybersecurity compliance, Risk Management Framework (RMF) activities, and security engineering efforts that protect mission-critical healthcare systems and sensitive government information. Working closely with engineering, cloud, infrastructure, testing, and Government security teams, you'll ensure enterprise applications remain secure, compliant, and fully authorized throughout the system development lifecycle. This is an excellent opportunity for an experienced cybersecurity professional who enjoys solving complex security challenges, collaborating across multidisciplinary teams, and helping deliver secure healthcare technology solutions that directly improve services for our nation's Veterans. Key Responsibilities • Lead cybersecurity activities supporting enterprise healthcare modernization initiatives. • Manage Risk Management Framework (RMF) activities throughout the system lifecycle. • Develop, maintain, and coordinate Authority to Operate (ATO) documentation and authorization packages. • Prepare and maintain System Security Plans (SSPs), Security Assessment Reports (SARs), Plan of Action & Milestones (POA&Ms), and other security documentation. • Coordinate security control implementation, assessment, and continuous monitoring activities. • Perform security risk assessments and recommend mitigation strategies that reduce organizational risk. • Collaborate with engineering, cloud, infrastructure, and development teams to integrate cybersecurity throughout system design and implementation. • Support vulnerability management, remediation activities, security testing, and audit readiness. • Monitor compliance with NIST, FISMA, VA, and other Federal cybersecurity requirements. • Provide cybersecurity guidance to project leadership and Government stakeholders while promoting security best practices across the program. Required Qualifications • Bachelor's degree in Cybersecurity, Information Assurance, Computer Science, Information Systems, or a related technical discipline. • Five (5) years of experience supporting cybersecurity, information assurance, or Information System Security Officer (ISSO) responsibilities within enterprise IT environments. • Experience implementing and maintaining the NIST Risk Management Framework (RMF). • Experience developing and maintaining ATO packages, SSPs, POA&Ms, and other Federal cybersecurity documentation. • Strong knowledge of NIST SP 800-53, FISMA, FedRAMP, Zero Trust principles, and Federal cybersecurity standards. • Experience supporting AWS GovCloud, Azure Government, or other secure cloud environments is preferred. • CISSP, CAP, Security+, CISM, or equivalent cybersecurity certification is preferred. • Experience supporting VA, VHA, DHA, or other Federal healthcare organizations, health IT, telehealth, or Federal program management is preferred. • Excellent analytical, leadership, communication, and problem-solving skills. • Ability to obtain and maintain a Level 3 Public Trust clearance. #LIREMOTE Here at rockITdata, we are committed to following our 10 Guiding Principles. Our Guiding Principles define our culture. They’re who we are, how we work, and what inspires us to be the best. We empower our people to be themselves and encourage an entrepreneurial way of thinking. In our challenging, fast-paced environment, no day is the same. Know the Why. Value People Above All Else. Transparency to a Fault. Progress, Not Perfection. Be Good by Doing Good. Smart People Can Disagree. Bend but Don’t Break. Represent Your Brand. Think Differently. Be Amazing, Be Fearless, Smile, Have Fun! Interested in joining something unique? Join us on our rockIT ship as we begin to blast off to the next chapter in our organization! rockITdata has become aware of a recruitment scam where unauthorized individuals are impersonating rockITdata recruiters, issuing fake job offers, and attempting to setup payment for the job seeker’s new hire costs. No one is ever required to complete any monetary transactions before starting employment with rockITdata. Legitimate rockITdata communications only come from @rockitdata.com email addresses and our official Applicant Tracking system, JazzHR (@applytojob.com email addresses). Please refer to our official Careers page at www.rockitdata.com/careers to accurately submit your application with us. You may also verify any suspicious communication by contacting our recruitment team directly through our official email, dreamjob@rockitdata.com. rockITdata is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to sex, race, color, religion, national origin, disability, protected Veteran status, age, or any other characteristic protected by law. rockITdata wants all interested and qualified candidates to be able to use our career site to review and apply for employment opportunities. If you have a disability and need an accommodation to access the application process, please contact us for assistance at dreamjob@rockitdata.com.

Requirements

Must-haves

Lead cybersecurity activities supporting enterprise healthcare modernization initiatives.
Manage Risk Management Framework (RMF) activities throughout the system lifecycle.
Develop, maintain, and coordinate Authority to Operate (ATO) documentation and authorization packages.
Prepare and maintain System Security Plans (SSPs), Security Assessment Reports (SARs), Plan of Action & Milestones (POA&Ms), and other security documentation.
Coordinate security control implementation, assessment, and continuous monitoring activities.
Perform security risk assessments and recommend mitigation strategies that reduce organizational risk.
Collaborate with engineering, cloud, infrastructure, and development teams to integrate cybersecurity throughout system design and implementation.
Support vulnerability management, remediation activities, security testing, and audit readiness.
Monitor compliance with NIST, FISMA, VA, and other Federal cybersecurity requirements.
Provide cybersecurity guidance to project leadership and Government stakeholders while promoting security best practices across the program.
Bachelor's degree in Cybersecurity, Information Assurance, Computer Science, Information Systems, or a related technical discipline.
Five (5) years of experience supporting cybersecurity, information assurance, or Information System Security Officer (ISSO) responsibilities within enterprise IT environments.
Experience implementing and maintaining the NIST Risk Management Framework (RMF).
Experience developing and maintaining ATO packages, SSPs, POA&Ms, and other Federal cybersecurity documentation.
Strong knowledge of NIST SP 800-53, FISMA, FedRAMP, Zero Trust principles, and Federal cybersecurity standards.
Excellent analytical, leadership, communication, and problem-solving skills.
Ability to obtain and maintain a Level 3 Public Trust clearance.
Here at rockITdata, we are committed to following our 10 Guiding Principles.
Know the Why.
Value People Above All Else.
Transparency to a Fault.

Nice-to-haves

Experience supporting AWS GovCloud, Azure Government, or other secure cloud environments is preferred.
CISSP, CAP, Security+, CISM, or equivalent cybersecurity certification is preferred.
Experience supporting VA, VHA, DHA, or other Federal healthcare organizations, health IT, telehealth, or Federal program management is preferred.

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

aiawsazure

Platform: jazzhr
Effort: medium