ISSO Consultant

About the Role

Join the Deloitte Cyber team to deliver powerful solutions that help clients navigate the ever-changing threat landscape, operate with resilience, grow with confidence, and proactively manage for success. As a Consultant on the Cyber Risk and Compliance team, you will provide analytical and coordination support for RMF, authorization, and continuous monitoring activities.

Key Responsibilities

• Provide analytical and coordination support for RMF, authorization, and continuous monitoring activities by maintaining trackers, organizing evidence, supporting reporting, and helping keep assigned systems audit-ready and authorization-ready.
• Maintain RMF documentation, system status trackers, and supporting records for assigned systems.
• Assist with evidence collection, validation, and organization to support assessments and package readiness.
• Track POA&M status documentation progress, control compliance, and remediation activities.
• Support preparation of dashboards, reports, and stakeholder summaries on authorization health and risk status.
• Assist with annual assessments, continuous monitoring actions, and change-driven reviews.
• Coordinate meetings, capture action items, and maintain auditable records in shared repositories.
• Support monitoring, detection, investigation, and remediation activities through log review, security testing, authorization package development, and audit support.

Requirements & Tech Stack

• Bachelor's degree
• Ability to obtain and maintain an active security clearance.
• 1+ Years of Experience with:
• RMF and security engineering.
• Supporting the full RMF lifecycle and federal Assessment and Authorization process, including mapping, implementing, interpreting, and documenting RMF security controls.
• Ensuring compliance with NIST Special Publication 800-53.
• Performing threat assessments aligned with RMF lifecycle processes.
• Managing POA&Ms.
• Conducting Security Tests and Evaluations (ST&E).
• Creating system security documentation.

Qualifications

• Ability to work independently and collaborate as part of a team.
• Effective written and verbal communication skills.
• Meticulous attention to detail and quality of work product.
• Ability to build and sustain professional relationships.
• Ability to lead projects or workstreams.
• Ability to manage and prioritize multiple tasks in a fast-paced and dynamic environment.
• Strong interpersonal skills and professional demeanor.
• Ability to meet deadlines.
• Ability to provide clear guidance to others.
• Strong technical writing capabilities.
• Must be legally authorized to work in the United States without the need for employer sponsorship, now or at any time in the future.
• Ability to travel up to 25%, on average, based on the work you do and the clients and industries/sectors you serve.

Preferred Qualifications

• Experience performing authorizations, risk assessments, and supporting third-party audits.
• Experience with manual STIGs, Security Content Automation Protocol (SCAP), and SCAP Compliance Checker (SCC).
• Experience conducting Splunk log reviews to support monitoring, detection, investigation, and remediation of security events and potential vulnerabilities.
• Prior technical experience as a system or network administrator.