22d ago

Information Systems Security Office (ISSO)

United States·Washingtonmid

OtherSystemsCybersecurityGovernance Risk and Compliance Manager

1 views0 saves0 applied

Apply Now

Quick Summary

Overview

Who We Are (video) At JRC, we tackle some of the toughest challenges faced by the Department of Defense (DoD) and other government agencies.

Technical Tools

OtherSystemsCybersecurityGovernance Risk and Compliance Manager

Join a high-visibility effort supporting the U.S. Navy as an Information Systems Security Officer (ISSO), where you'll play a critical role in securing the next generation of Electronic Security Systems. In this position, you'll work alongside cybersecurity professionals, engineers, and government stakeholders to develop, manage, and maintain the Authority to Operate (ATO) for complex security system upgrades and integrations.

This is an opportunity for a cybersecurity professional who thrives in dynamic environments and enjoys owning the full RMF and ATO lifecycle. You'll lead risk management activities, ensure compliance with Department of Defense cybersecurity requirements, and serve as a trusted advisor to both technical teams and government decision-makers. Your work will directly support mission-critical capabilities while helping shape and strengthen the overall security posture of Navy systems.

Responsibilities

~1 min read

→Spearhead the development, implementation, and management of the Authority to Operate (ATO) per customer guidance.
→Ensure compliance with customer specific cybersecurity requirements, policies, and procedures.
→Partner with cross-functional teams to ensure all aspects of the customers’ Risk Management Framework (RMF) are effectively implemented.
→Initiate, build and track the ATO package through its lifecycle and update for continued ATO as the system is updated or modified.
→Conduct risk assessments and manage the overall cybersecurity risk posture.
→Manually track the artifacts created in support of the ATO lifecycle.
→Liaise with external stakeholders and regulatory bodies.

A bachelor's degree in computer science, Cybersecurity, or related field (or equivalent experience)
A current CompTIA Security+ certification
An active DoD Secret Security Clearance
7+ years of experience developing Risk Management Framework (RMF) packages
Proven track record of developing effective cybersecurity programs and strategies using approval authority guidance.
Extensive knowledge of security control selection, evaluation, implementation, assessment, and authorization submittal
Experience working in a fast-paced, dynamic environment where requirements can change mid-process and rework is required under a compressed timeframe
Experience with Approval Authority modified RMF process
Strong understanding of cybersecurity principles, including confidentiality, integrity, and availability
Ability to convey complex information clearly, concisely, and accurately in both technical and non-technical contexts

⭐Bonus Points for...

Master’s Degree in related field
CISM, CISSP, or other relevant certifications
Active DoD TOP SECRET security clearance
Experience with Department of the Navy physical security requirements and procedures