Information System Security Officer (ISSO)

G2 Ops, Inc. • Arlington, VA

4d • $110,000 - $135,000 • Hybrid

About The Position

G2 Ops supports mission-critical defense and technology initiatives by solving complex operational and engineering challenges. We are seeking a motivated, collaborative Information System Security Officer (ISSO) to support U.S. Navy submarine systems and cybersecurity authorization activities. In this role, you'll contribute to Risk Management Framework (RMF) authorization, security control compliance, and continuous monitoring activities that protect mission-critical Navy systems. You'll work closely with government program management, Information System Security Managers (ISSMs), Information System Security Engineers (ISSEs), system integrators, and other stakeholders to maintain Authorization to Operate (ATO) readiness and ensure compliance with applicable DoD/DoW and Department of the Navy cybersecurity requirements.

Requirements

• Bachelor's degree in Cybersecurity, Computer Engineering, Electrical Engineering, Electronics Engineering, Mathematics with a concentration in Computer Science, or equivalent qualifications.
• 3+ years of professional experience in cybersecurity engineering, including demonstrated experience supporting DoD or Navy RMF authorization activities.
• Hands-on experience developing, reviewing, and maintaining RMF authorization packages within eMASS.
• Strong working knowledge of NIST SP 800-53 Rev. 5, DoDI/DoWI 8500.01, DoDI/DoWI 8510.01, and applicable DoD/DoW and DON cybersecurity requirements.
• Experience reviewing ACAS vulnerability scans, STIG compliance results, penetration testing findings, and security assessment documentation.
• Experience managing POA&Ms, security control evidence, risk mitigation activities, and continuous monitoring requirements.
• Familiarity with SSPs, SAPs, SARs, security authorization boundaries, and ATO processes.
• Ability to coordinate effectively with government program personnel, cybersecurity assessors, system integrators, and technical stakeholders.
• Ability to communicate complex cybersecurity risks, assessment findings, and remediation recommendations clearly and accurately.
• Relevant cybersecurity certifications aligned with assigned DoW 8140 workforce requirements.
• Must be able to obtain and maintain Active DoD Secret Clearance.

Nice To Haves

• Experience supporting NAVSEA, NUWC, or Navy acquisition programs.
• Experience performing RMF authorization activities for submarine, shipboard, or other Navy platform systems.
• Familiarity with the Navy RMF Process Guide and Navy SCA Business Rules.
• Experience supporting Type Authorizations, multi-site deployments, or systems with complex security authorization boundaries.
• Knowledge of security control inheritance involving system integrators, external operators, or hosting providers.

Responsibilities

• Develop, review, and maintain Risk Management Framework (RMF) authorization packages, including SSPs, SAPs, SARs, and supporting cybersecurity documentation.
• Manage authorization workflows, security artifacts, and approval submissions in eMASS to support initial and ongoing authorizations, annual reviews, and ATO maintenance.
• Maintain authorization boundaries, system inventories, security control implementation statements, and control allocation documentation in accordance with NIST SP 800-53 Rev. 5 and Navy requirements.
• Evaluate cybersecurity risks through ACAS vulnerability scans, STIG compliance reviews, penetration testing findings, and security control assessments.
• Develop and maintain Plans of Action and Milestones (POA&Ms), tracking vulnerabilities, remediation efforts, risk ratings, and corrective action closure.
• Coordinate with system owners, integrators, hosting providers, and government stakeholders to validate security control evidence, assess control inheritance, and resolve assessment findings.
• Conduct Security Impact Assessments (SIAs) for system changes and support continuous monitoring, annual control assessments, contingency planning, and compliance reporting.
• Collaborate with Security Control Assessors (SCAs), ISSMs, and government stakeholders to support authorization decisions, address security findings, and maintain program readiness.
• Support Type Authorization strategies and cybersecurity requirements for Navy systems deployed across multiple sites and organizational boundaries.
• Track authorization milestones, communicate cybersecurity risks and remediation progress, and prepare decision-support materials for leadership while ensuring compliance with Navy RMF Process Guide, Navy SCA Business Rules, and applicable DoW/DON policies.

Benefits

• 100% company-paid insurance for medical, dental, and vision for eligible employees and family members
• 100% company-paid insurance for life, short-term disability (STD), and long-term disability (LTD) for eligible employees
• 401(k) plan with discretionary employer matching
• 10 paid holidays
• Paid time off (PTO)
• Educational assistance
• Professional development opportunities
• Performance recognition programs
• Resources that support long-term career growth and work-life balance

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level