ISSO

BlueWater Federal is looking for an ISSO to prepare, update, and maintain A&A documentation in eMASS, including POA&Ms, Security Plans, and Continuous Monitoring artifacts to ensure systems remain in compliance with DoDI 8510.01 and Navy cybersecurity policy at the Naval Surface Warfare Center (NSWC), Philadelphia, PA Responsibilities

• Collaborate with ISSMs and Navy Qualified Validators to support control implementation, validation, and risk assessments for Navy IT systems throughout their lifecycle.
• Track and remediate vulnerabilities using tools such as VRAM; ensure timely resolution or risk acceptance is documented and approved.
• Execute the System Level Continuous Monitoring Strategy by reviewing outputs from tools like ACAS and SIEM, updating eMASS records, and escalating concerns as needed.
• Maintain awareness of changes to DISA STIGs, NIST guidelines, and Navy policies; ensure system configurations and documentation are kept current and reflect evolving requirements.

• Bachelor’s degree in computer science, information technology, communications systems management, or an equivalent science, technology, engineering & mathematics (STEM) degree from an accredited college or university
• 6+ years of experience coordinating and enacting required security changes, within various levels of an organization, ensuring compliance with published policies; conducting cybersecurity vulnerability and threat analysis; and supporting cyber incident-response by isolating potentially effected assets, initial investigation and data collection, through status updates/reporting.
• Must have an active Secret clearance
• Must have one of the following IAM-II certifications
• Certified Authorization Professional (CAP)
• CompTIA Advanced Security Practitioner (Continuing Education) (CASP+ CE
• Certified Information Security Manager (CISM)
• Certified Information Systems Security Professional (CISSP) (or Associate)
• GIAC Security Leadership Certification (GSLC)
• Certified Chief Information Security Officer (CCISO)
• HealthCare Information Security and Privacy Practitioner (HCISPP)