Information Systems Security Officer (ISSO)

Entarian • North Charleston, SC

2d • Onsite

About The Position

Entarian is seeking an experienced Information Systems Security Officer (ISSO) to support the Naval Information Warfare Center Atlantic (NIWC Atlantic) Expeditionary Enterprise Systems and Services Division. NIWC Atlantic provides design, acquisition, and sustainment services for Marine Corps Systems Command information technology systems. The contractor will serve as a primary cybersecurity and Risk Management Framework (RMF) specialist supporting the Portfolio Acquisition Executive Mission Systems Information Systems Security Manager. This is an Assessment and Authorization (A&A)-focused role, guiding packages through the RMF process to achieve Authority to Operate accreditation and maintain continuous monitoring.

The position requires full-time, on-site work in North Charleston, South Carolina. Up to one day of telework per week may be permitted, subject to Government and management approval and mission requirements. The stated salary range is approximately $89,000–$119,000 per year.

Requirements

• Hold an active U.S. Government Secret security clearance.
• Meet one of the stated education and experience tracks: a bachelor's degree in Cybersecurity, Computer Engineering, Electrical Engineering, Electronics Engineering, Mathematics with a computer science concentration, or equivalent, plus 3 or more years of cybersecurity policy and A&A compliance experience; or a high school diploma, GED, trade school education, or four years of equivalent military service, plus 10 or more years of professional technical problem-solving experience.
• Have direct experience preparing, implementing, and ensuring compliance with cybersecurity policies and A&A requirements.
• Have a strong practical foundation in engineering, software lifecycle maintenance, and fabrication methodologies.
• Hold an Information Assurance Management (IAM), Information Assurance Technical (IAT), or Information Assurance System Architect and Engineer (IASAE) Level I certification appropriate to the position under DoD 8570.1M.
• Have extensive experience drafting SSPs, executing continuous monitoring strategies, and defending packages to an Authorizing Official or Security Control Assessor.
• Have comprehensive experience managing the full A&A lifecycle and maintaining DoD RMF accreditation packages in compliance with DoDI 8510.01, NIST SP 800-53 Rev. 5, CNSSI 1253, and ICD 503.
• Have hands-on experience using eMASS and/or MCCAST to manage accreditation packages and navigate system workflows.

Nice To Haves

• Experience supporting DoD, Intelligence Community, or classified government systems.
• Demonstrated experience engineering NIST RMF controls and producing RMF artifacts.
• Understanding of secure systems engineering, defense-in-depth, Zero Trust architectures, and large-scale distributed systems.
• Experience with operating systems, networking, virtualization, cloud, identity and access management, encryption, and cybersecurity technologies.
• Experience conducting vulnerability assessments using ACAS, Nessus, SCAP, or similar tools.
• Active security certifications such as Security+, CISSP, CASP+, CCSP, GIAC, or IASAE.
• Strong technical writing and verbal communication skills for explaining cybersecurity concepts to technical and leadership audiences.

Responsibilities

• Develop, review, and maintain A&A documentation, including NIST SP 800-53 Rev. 5 controls, System Security Plans (SSPs), Security Assessment Reports (SARs), and Plans of Action and Milestones (POA&Ms).
• Gather and upload artifacts and maintain system information in eMASS.
• Support the setup, execution, and processing of results for security events, including Annual Security Reviews (ASRs) and Independent Verification and Validation (IV&V).
• Maintain system-level POA&Ms on a continuous basis.
• Guide accreditation packages through the RMF process toward Authority to Operate accreditation and maintain continuous monitoring.
• Prepare, implement, and ensure compliance with cybersecurity policies and A&A requirements.
• Draft SSPs, execute continuous monitoring strategies, and defend packages to the Navy Authorizing Official or functional Security Control Assessor.
• Document, analyze, and remediate system vulnerabilities in accordance with IAVM notices and DISA STIGs.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level