Information System Security Officer; ISSO

• Location: Arlington, VA at our G2 Ops office.
• Work Setting:In-Office with Remote / Flexible Schedule Available Based on Program Requirements
• Salary Range: $110,000 - $135,000 plus comprehensive benefits package.
• Years of Industry
  
  Experience:
  
  3+ years of relevant experience.
• Security Clearance Requirement: Must be able to obtain and maintain Active DoD Secret Clearance.

G2 Ops supports mission-critical defense and technology initiatives by solving complex operational and engineering challenges. We are seeking a motivated, collaborative Information System Security Officer (ISSO) to support U.S. Navy submarine systems and cybersecurity authorization activities.

In this role, you'll contribute to Risk Management Framework (RMF) authorization, security control compliance, and continuous monitoring activities that protect mission-critical Navy systems. You'll work closely with government program management, Information System Security Managers (ISSMs), Information System Security Engineers (ISSEs), system integrators, and other stakeholders to maintain Authorization to Operate (ATO) readiness and ensure compliance with applicable DoD/DoW and Department of the Navy cybersecurity requirements.

• Develop, review, and maintain Risk Management Framework (RMF) authorization packages, including SSPs, SAPs, SARs, and supporting cybersecurity documentation.
• Manage authorization workflows, security artifacts, and approval submissions in eMASS to support initial and ongoing authorizations, annual reviews, and ATO maintenance.
• Maintain authorization boundaries, system inventories, security control implementation statements, and control allocation documentation in accordance with NIST SP 800-53 Rev. 5 and Navy requirements.
• Evaluate cybersecurity risks through ACAS vulnerability scans, STIG compliance reviews, penetration testing findings, and security control assessments.
• Develop and maintain Plans of Action and Milestones (POA&Ms), tracking vulnerabilities, remediation efforts, risk ratings, and corrective action closure.
• Coordinate with system owners, integrators, hosting providers, and government stakeholders to validate security control evidence, assess control inheritance, and resolve assessment findings.
• Conduct Security Impact Assessments (SIAs) for system changes and support continuous monitoring, annual control assessments, contingency planning, and compliance reporting.
• Collaborate with Security Control Assessors (SCAs), ISSMs, and government stakeholders to support authorization decisions, address security findings, and maintain program readiness.
• Support Type Authorization strategies and cybersecurity requirements for Navy systems deployed across multiple sites and organizational boundaries.
• Track authorization milestones, communicate cybersecurity risks and remediation progress, and prepare decision-support materials for leadership while ensuring compliance with Navy RMF Process Guide, Navy SCA Business Rules, and applicable DoW/DON policies.

• Bachelor's degree in Cybersecurity, Computer Engineering, Electrical Engineering, Electronics Engineering, Mathematics with a concentration in Computer Science, or equivalent qualifications.
• 3+ years of professional experience in cybersecurity engineering, including demonstrated experience supporting DoD or Navy RMF authorization activities.
• Hands-on experience developing, reviewing, and maintaining RMF authorization packages within eMASS.
• Strong working knowledge of NIST SP 800-53 Rev. 5, DoDI/DoWI 8500.01, DoDI/DoWI 8510.01, and applicable DoD/DoW and DON cybersecurity requirements.
• Experience reviewing ACAS vulnerability scans, STIG compliance results, penetration testing findings, and security…