S

Steampunk

Federal software solutions delivering user-focused outcomes

ISSO Portfolio Manager / Team Lead

Security Governance, Risk & ComplianceConfirmed live in the last 24 hours
Full-timeWashington, DC, USA$125k - $175k /yr

About the Job

Requirements

  • A Master's degree and 6 years of relevant experience, or a Bachelor's degree and 8 years of relevant experience, or no degree and 12 years of relevant experience.
  • An active CISSP, CASP, CISA, CISM, or GSLC certification to support the contract.
  • Strong knowledge of NIST Risk Management Framework, FISMA, and modern security practices.
  • Prior experience as a supervisor or team lead, with demonstrated ability to manage, mentor, and develop staff.
  • Experience with vulnerability management and reviewing systems against federal requirements.
  • Experience cultivating teams and balancing quality, speed, and customer expectations.
  • Public Trust is required.
  • Ability to communicate effectively and simplify security concepts for non-technical partners.

Responsibilities

  • Lead, mentor, and develop a team of ISSOs to deliver high-quality security support.
  • Coordinate between ISSO teams and project or program managers so security tasks are accurately reflected in project schedules and sprints.
  • Build relationships with system owners and stakeholders and provide security as a customer-oriented service.
  • Manage competing priorities across multiple systems while ensuring clear communication and timely delivery.
  • Use sprint-based planning in Agile environments to prioritize ISSO work.
  • Drive ISSO-related project execution across multiple systems, coordinating timelines, dependencies, and deliverables with program and project leads.
  • Maintain security records and workflows in JIRA, ServiceNow, and other modern tools.
  • Deliver technically accurate, polished, and timely security artifacts that meet program standards.
  • Oversee security authorization packages, continuous monitoring deliverables, audit readiness, data calls, and risk reporting.
  • Track vulnerabilities, guide remediation, and maintain system status on the FISMA scorecard.
  • Identify blockers, communicate risks, and recommend actionable mitigations.
  • Participate in SDLC/SLM activities and help teams integrate security early and effectively.
  • Deliver executive-level reporting and presentations to senior leadership or stakeholders.
  • Train or facilitate sessions for groups of 10–25 or more people.
  • Contribute to developing or refining processes, standard operating procedures, and templates for recurring security artifacts.
  • Assess workload trends across assigned systems and provide leadership with input on resource allocation, staffing needs, and hiring priorities.

About the Company

Steampunk

Federal software solutions delivering user-focused outcomes

Steampunk helps U.S. federal government agencies deliver digital programs and services. The company partners with government clients, using a startup-style, customer-centered delivery approach to design, develop, and deploy software and services that support mission goals. Its products and work are executed in close collaboration with clients, emphasizing rapid delivery and high-quality user experiences. Steampunk differentiates itself by focusing specifically on federal customers and by embedding client input at every step of the process, from planning through deployment, so outcomes meet user needs and mission requirements at speed. The overall goal is to produce reliable, usable solutions that achieve clear mission impacts for government programs.

Company size
501-1,000
Company stage
Not listed
Total funding
Not listed
Headquarters
Winston-Salem, NC
Founded
2002

Recently Posted Jobs

Explore more opportunities at Steampunk

See more jobs