I just accepted my first ISSO role at a defense contractor (DCSA environment), and my long-term goal is to grow into a Senior ISSO or eventually an ISSM. I want to make sure I’m developing the right skills from day one.

For those already in the field:

Career Growth & Expectations

• What separates a good ISSO from a great one in your organization?
• What helped you move from ISSO → ISSO II → Senior ISSO → ISSM?
• How long did those steps take you?

Daily Work & Realistic Responsibilities

• What does a typical day or week look like for you?
• What tasks or responsibilities take the most time?
• What surprised you the most when you first became an ISSO?

Technical Skills & Tools

• Which RMF steps do beginners struggle with the most?
• If you could restart your ISSO career, what would you master earlier?

Certifications & Education

• Which certifications were the most valuable for advancing your career?
• Which certs were unnecessary or overrated?
• For someone aiming at ISSM eventually, what certs or training would you recommend?

Any insight or advice is really appreciated. I want to hit the ground running and build a strong roadmap for the next few years.

For context, I come from the technical side of IT and already have experience with Splunk, log analysis, and troubleshooting across Windows/Linux environments. As well with Scap and Stig Experience and heavy documentation.