Cybersecurity Engineer II: RMF & Compliance Expert

Information Systems Solutions, Inc.; Charleston (SC); On-site; USD 85,000 - 120,000; Full time

Job summary

Information Systems Solutions, Inc. is seeking a Cybersecurity Engineer II to join our growing team. You will support RMF processes, prepare authorization documentation, and coordinate with ISSOs and assessors to address findings while ensuring compliance with security standards.

The role requires in-depth knowledge of RMF, A&A artifacts, and GRC platforms, with a focus on risk mitigation and continuous monitoring. Travel to Antarctica onsite locations may be required.

Qualifications

• Minimum 5 years of cybersecurity experience with RMF and A&A documentation.
• Experience developing SSPs, POA&Ms, and security impact analyses.
• Familiarity with continuous monitoring, vulnerability management, and regulatory requirements.

Responsibilities

• Support the RMF process across the system lifecycle.
• Prepare and maintain SSPs, POA&Ms, and security policies.
• Coordinate with system owners and assessors to collect evidence and resolve findings.
• Track remediation activities and validate closure of weaknesses.
• Assist with audits and compliance reviews.

Skills

RMF knowledge

NIST requirements

A&A documentation

SSP/POA&M

Continuous monitoring

Governance, Risk & Compliance

Vulnerability management

Security controls assessment

Education

Bachelor’s degree in Cybersecurity, Computer Science, Electrical or Electronics Engineering

Tools

ACAS

eMASS

GRC platforms

STIGs

Security scanning tools

Job description

Information Systems Solutions, Inc. is seeking a Cybersecurity Engineer II to join our growing team. You will support RMF processes, prepare authorization documentation, and coordinate with ISSOs and assessors to address findings while ensuring compliance with security standards.

The role requires in-depth knowledge of RMF, A&A artifacts, and GRC platforms, with a focus on risk mitigation and continuous monitoring. Travel to Antarctica onsite locations may be required.