Information Systems Security Manager - AWS Cloud
About The Position
Everforth ECS is seeking an experienced Information Systems Security Manager (ISSM) to support U.S. Navy systems and programs from the company’s Groton, Connecticut office. The ISSM serves as the primary cybersecurity authority for assigned systems, ensuring compliance with Department of Defense and Department of the Navy cybersecurity policies under the Risk Management Framework (RMF). The ISSM leads preparations and government interactions for system security assessments and helps ensure information systems maintain their Authority to Operate (ATO). The role manages security policies, risk assessments, security controls, and Plans of Action and Milestones (POA&Ms). It also advises senior management on cybersecurity issues, communicates risks, and collaborates with technical teams and stakeholders. The position requires ownership and follow-through on risks, issues, and tasks, effective teamwork and self-management, and hands-on guidance, direction, and mentoring for technical teams. The successful candidate is organized, detail-oriented, and able to communicate clearly in writing and orally with customers, stakeholders, peers, and leadership. The role supports Navy information systems across the full RMF lifecycle, maintains RMF documentation and system accreditation information in eMASS, supports security assessments and audits, and provides cybersecurity guidance to engineering teams throughout the system development lifecycle. The position also oversees incident-response coordination in alignment with DoD and Navy requirements.
Requirements
- Active Secret security clearance and willingness and ability to obtain TS/SCI.
- Bachelor’s degree in Cybersecurity, Information Technology, or a related field, or equivalent experience.
- At least 8 years of cybersecurity experience, including at least 3 years as an ISSM or senior ISSO in a DoD/Navy environment.
- Experience with AWS GovCloud.
- Strong experience implementing RMF under DoDI 8510.01.
- Hands-on experience with eMASS.
- In-depth knowledge of NIST SP 800-53 Rev. 5 controls, NIST SP 800-37 Rev. 2, DoDI 8500.01 / 8510.01, and SECNAV M-5239.1.
- Experience supporting Navy programs, such as NAVWAR, NAVAIR, NAVSEA, or USMC systems.
- Familiarity with DISA STIGs and SCAP compliance tools, ACAS, and HBSS or other endpoint security solutions.
- Strong understanding of on-premises, cloud, and hybrid system architectures.
- Strong understanding of AWS and Terraform.
- Ability to multitask, take ownership and accountability, self-manage tasks, and work well in a team-oriented environment.
- Strong written and oral communication skills, organization, and attention to detail.
Responsibilities
- Serve as the ISSM for Navy information systems in accordance with DoDI 8510.01 (RMF) and DoDI 8500.01 (Cybersecurity).
- Oversee the full RMF lifecycle, including categorization, control selection, implementation, assessment, authorization, and continuous monitoring.
- Develop, maintain, and manage System Security Plans (SSPs), Security Assessment Reports (SARs), Plans of Action and Milestones (POA&Ms), and continuous monitoring strategies.
- Ensure compliance with NIST SP 800-53 Rev. 5, NIST SP 800-37 Rev. 2, DoDM 5200.01, and SECNAV M-5239.1.
- Interface with Navy Authorizing Officials (AOs), Security Control Assessors (SCAs), Information System Owners (ISOs), and Program Managers (PMs).
- Manage system accreditation activities in eMASS and ensure system data is accurate and complete.
- Conduct and support security control assessments, vulnerability management, and mitigation tracking.
- Ensure compliance with DISA Security Technical Implementation Guides (STIGs) and Security Requirements Guides (SRGs).
- Support audits, inspections, and cybersecurity readiness reviews, including FISMA and DON CIO inspections.
- Provide cybersecurity guidance to engineering teams throughout the system development lifecycle, aligning with DevSecOps practices where applicable.
- Oversee incident-response coordination in accordance with DoDI 8530.01 and Navy procedures.
- Advise senior management on cybersecurity issues and communicate security risks.
- Provide hands-on guidance, direction, and mentoring to technical teams; manage and resolve risks, issues, and tasks through completion.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
