NOSR - SISS2 -Specialist, Information System Security II (ATO/RMF Manager)

Amentum•Norfolk, VA

41d•Onsite

About The Position

Amentum is seeking a Specialist, Information System Security II (ATO/RMF Manager) to support the COMSUBLANT assessment and authorization (A&A) process for Atlantic Fleet submarines. This role involves serving as a NIST Risk Management Framework (RMF) subject matter expert, reviewing documentation for the authorization to operate (ATO) process, and providing guidance to stakeholders. The position requires monitoring the A&A process progression, preparing and reviewing security documentation such as System Security Plans (SSPs), and advising IT personnel on A&A policies. The specialist will also maintain awareness of guidance changes, provide status updates to Type Commanders, assist in evaluating security solutions, and maintain records of network devices. Additionally, the role involves proposing and implementing information systems security policies and supporting the Information Systems Security Manager (ISSM) in maintaining the operational cybersecurity posture.

Requirements

Three (3) years of full-time hands-on experience in the operation and/or maintenance of Submarine Network Systems and/or major network administration systems on board US Naval Submarines; or an equivalent civilian work experience outside of the military.
Five (5) years full-time management experience applying knowledge of policies, procedures, and structures to develop, implement, and maintain a secure Information Systems computing environment on US NAVY Ships/Submarine.
Active SECRET clearance.
Ability to obtain TS/SCI clearance.
US Citizenship is required to maintain a secret clearance.

Responsibilities

Serve as NIST Risk Management Framework (RMF) subject matter expert (SME) for COMSUBLANT assessment and authorization (A&A) process.
Support Atlantic Fleet submarines by reviewing all applicable documentation relevant to the authorization to operate (ATO) process for accuracy and relevance, providing guidance and feedback as applicable based on current A&A policies.
Monitor and track the progression of the A&A process for assigned units and COMSUBLANT special projects, ensuring stakeholders are aware of and able to meet prescribed deadlines.
Prepare and review documentation to include System Security Plans (SSP) and other artifacts.
Advise and guide ISIC and shipboard IT Divisional Sailors on A&A policies and references for ATO certification and maintenance.
Maintain awareness of any change to applicable guidance or practice IAW governing policies and ensure that information is formally provided to boats in clear and concise language.
Provide status and feedback of the A&A process for assigned units to Type Commanders as needed, ensuring there is awareness of identified or trending fleet deficiencies and difficulties and include recommendations for improvement.
Assist in the evaluation of security solutions to ensure they meet security requirements for processing classified information.
Maintain records on workstations, servers, routers, firewalls, and other network devices including system updates and upgrades.
Propose, coordinate, and implement information systems security policies, standards, and methodologies.
Provide support to the Information Systems Security Manager (ISSM) for maintaining the appropriate operational cybersecurity posture for a system, platform, program, or enclave.