isso grc lead

About the role

BlueWater Federal is looking for an Information System Security Officer (ISSO) to prepare, update, and maintain Assessment & Authorization (A&A) documentation in eMASS, including Plans of Action & Milestones (POA&Ms), Security Plans, and Continuous Monitoring artifacts to ensure systems remain in compliance with DoDI 8510.01 and Navy cybersecurity policy at the Naval Surface Warfare Center (NSWC), Philadelphia, PA.

Responsibilities

• Collaborate with Information System Security Managers (ISSMs) and Navy Qualified Validators to support control implementation, validation, and risk assessments for Navy IT systems throughout their lifecycle.
• Track and remediate vulnerabilities using tools such as VRAM; ensure timely resolution or risk acceptance is documented and approved.
• Execute the System Level Continuous Monitoring Strategy by reviewing outputs from tools like ACAS and SIEM, updating eMASS records, and escalating concerns as needed.
• Maintain awareness of changes to DISA STIGs, NIST guidelines, and Navy policies; ensure system configurations and documentation are kept current and reflect evolving requirements.

Qualifications

• Bachelor's degree in computer science, information technology, communications systems management, or an equivalent science, technology, engineering & mathematics (STEM) degree from an accredited college or university.
• 6+ years of experience coordinating and enacting required security changes within various levels of an organization, ensuring compliance with published policies; conducting cybersecurity vulnerability and threat analysis; and supporting cyber incident-response by isolating potentially affected assets, initial investigation and data collection, through status updates/reporting.
• Must have an active Secret clearance.
• Must have one of the following IAM-II certifications:
  • Certified Authorization Professional (CAP)
  • CompTIA Advanced Security Practitioner (Continuing Education) (CASP+ CE)
  • Certified Information Security Manager (CISM)
  • Certified Information Systems Security Professional (CISSP) (or Associate)
  • GIAC Security Leadership Certification (GSLC)
  • Certified Chief Information Security Officer (CCISO)
  • HealthCare Information Security and Privacy Practitioner (HCISPP)