ISSO Portfolio Manager / Team Lead

steampunk•Washington, DC

1d•$125,000 - $175,000•Hybrid

About The Position

Steampunk is seeking an ISSO Portfolio Manager / Team Lead to support a federal customer in Washington, DC. This role is perfect for someone who blends strong cybersecurity expertise with exceptional customer engagement, coaching, and leadership skills. You’ll guide a team of ISSOs, partner closely with system owners and stakeholders, and deliver high‑quality security outcomes at speed across a dynamic portfolio.

Requirements

Master's degree and 6 years of relevant experience; OR Bachelor's degree and 8 years of relevant experience; OR No degree and 12 years of relevant experience
One of the following certifications which must be Active to support of the contract: CISSP, CASP, CISA, CISM, GSLC .
Strong knowledge of NIST RMF, FISMA, and modern security practices .
Experience with vulnerability management and reviewing systems against federal requirements.
Excellent communication skills and the ability to simplify security for non‑technical partners.
Experience mentoring teams and balancing quality, speed, and customer expectations.
Public Trust required.

Responsibilities

Lead, mentor, and develop a team of ISSOs to deliver high‑quality security support.
Build strong relationships with system owners and stakeholders and position security as a customer‑oriented service.
Manage competing priorities across multiple systems while ensuring clear communication and timely delivery.
Operate effectively in Agile environments, using sprint‑based planning to prioritize ISSO work
Maintain accurate security records and workflows in JIRA, ServiceNow, and other modern tools .
Deliver technically accurate, polished, and timely security artifacts that meet program standards and enable “quality at speed.”
Oversee security authorization packages, continuous monitoring deliverables, and risk reporting.
Track vulnerabilities, guide remediation, and keep all systems “green” on the FISMA scorecard .
Identify blockers, communicate risks, and provide actionable mitigation recommendations.
Participate in SDLC/SLM activities and help teams integrate security early and effectively.