Information System Security Officer (ISSO)

About Us:

At RELI Group, our work is grounded in purpose. We partner with government agencies to solve complex challenges, improve public health, strengthen national security, and make government services more effective and efficient. Our team of over 500 professionals brings deep expertise and a shared commitment to delivering meaningful outcomes. Behind every solution is a group of experts who care deeply about impact-whether we're supporting data-driven decisions, modernizing systems or safeguarding critical programs.

Position Summary:

RELI Group is seeking a knowledgeable and compliance-focused Information System Security Officer (ISSO) Specialist to support the Information Security and Privacy Services (ISPS) under the Marketplace System Security and Privacy Support Services (MSSPSS) contract. This role is responsible for supporting the security authorization, risk management, and ongoing security compliance of CMS systems in accordance with the Risk Management Framework (RMF), FISMA, and CMS Acceptable Risk Safeguards (ARS) 5.0. The ISSO Specialist will ensure that information systems remain secure and compliant through documentation, assessments, and collaboration with system owners, stakeholders, and cybersecurity teams.

Responsibilities:

• Support system security authorization and reauthorization efforts for ACA/NST systems in compliance with NIST RMF and CMS ARS 5.0
• Maintain and update required security documentation (SSP, SAR, POA&M, Contingency Plan, e-RA, etc.)
• Coordinate with CMS stakeholders, system owners, and cybersecurity SMEs to ensure compliance with FISMA, FedRAMP, and CMS policies
• Monitor and report on the status of POA&M items, risk mitigations, and control implementations
• Participate in control assessments, audits, and continuous monitoring activities
• Support security incident documentation, data calls, and ATO package submissions
• Provide security input and support for changes to the system environment, architecture, or operational posture
• Ensure traceability between security controls, findings, and remediation efforts

• Bachelor's degree in Cybersecurity, Information Systems, or a related field
• 5+ years of experience supporting RMF, ISSO, or compliance-related activities in a federal IT environment
• Strong knowledge of NIST SP 800-53, NIST 800-37, CMS ARS 5.0, and FISMA reporting
• Experience preparing and maintaining ATO documentation and supporting audits or security reviews
• Excellent technical writing, communication, and collaboration skills
• Detail-oriented with a strong understanding of security control implementation and tracking

Preferred Qualifications:

• Experience supporting CMS, HHS, or ACA-related programs
• Familiarity with eMASS, ServiceNow GRC, or CMS CyberOne systems
• Certifications such as CAP, CISSP, Security+, or CISM
• Knowledge of cloud security compliance (FedRAMP, AWS, Azure)
• Understanding of Zero Trust Architecture and continuous monitoring strategies

EEO Employer:

RELI Groupis an Equal Employment Opportunity / Affirmative Action employer. All qualified applicants will receive consideration for employment without regard to race, color, national origin, ancestry, citizenship status, military status, protected veteran status, religion, creed, physical or mental disability, medical condition, marital status, sex, sexual orientation, gender, gender identity or expression, age, genetic information, or any other basis protected by law, ordinance, or regulation.

HUBZone:

We encourage all candidates who live in a HUBZone to apply. You can check to see if your address is located in a HUBZone by accessing theSBA HUBZone Map.

The annual salary range for this position is $85,000.00 to $115,000.00.Actual compensation will depend on a range of factors, including but not limited to the individual's skills, experience, qualifications, certifications, location, other business and organizational needs, and applicable employment laws. The estimate displayed represents the typical salary range for this position and is just one component of the total compensation package for employees. RELI Group provides a variety of additional benefits to its employees. For additional details on the benefits that RELI Group offers clickhere