FSO & ISSM - RMF/DoD IT Security Lead

Mercury Systems; Oxnard (CA); On-site; USD 110,000 - 140,000; Full time

Job summary

Mercury Systems in Oxnard, CA seeks a Facility Security Officer (FSO) and Information Systems Security Manager (ISSM) to oversee NISP compliance and RMF-based security across multiple locations. You will implement security policies, manage SSPs in eMASS, coordinate with DoD and CSA, and lead risk assessments to protect personnel, information, and facilities.

This dual-role requires vigilance, strong documentation, and the ability to interact with program managers and engineering teams to

Qualifications

• Typically requires 4 years of experience in cybersecurity, RMF, and C&A processes.
• Active Secret Clearance.
• Experience with eMASS and RMF procedures.
• Ability to conduct thorough risk assessments and manage complex documentation.
• Experience with network assets and peripheral equipment.
• Maintain facility and personnel information in DISS and NISS.

Responsibilities

• Collaborate with the Corporate ISSM to ensure all accredited information systems meet RMF requirements.
• Prepare, maintain, and upload System Security Plans (SSPs) and supporting artifacts in eMASS.
• Ensure SSPs accurately reflect system configuration and required security controls.
• Support certification testing and assessments conducted by the Cognizant Security Agency (CSA).
• Maintain facility information system records in eMASS.
• Develop and maintain procedures supporting Configuration Management for security relevant hardware, software, and firmware.
• Conduct risk and vulnerability assessments of classified systems and verify the effectiveness of security controls.
• Ensure compliance with DoD certification and accreditation requirements, including DoDI 8510.01 (RMF for DoD IT).
• Install, update, and maintain security-related software tools to detect malware and intrusions.
• Provide Security guidance to Program Managers, Engineering/Production, Management, and HR.
• Administer and coordinate DoD and other industrial security programs to ensure compliance with 32 CFR 117.
• Coordinate due diligence and risk assessments to identify improvements in physical security controls.
• Maintain and provide security classification guidance of DD254's and related documents.
• Operate and maintain security education, training, and awareness programs.
• Respond to intrusion alarms as needed.
• Manage physical security for the site including intrusion detection, access control, CCTV, and containers.
• Be liaison for the facility with DSCA and other government agencies.

Skills

RMF procedures

eMASS familiarity

Risk assessments

Network assets management

DISS / NISS data management

Security policy adherence

Education

Master's degree in Information Systems

CISSP or CASP certification

FSO/ISSM Certification within 6 months

Tools

eMASS

DISS

NISS

Job description

Mercury Systems in Oxnard, CA seeks a Facility Security Officer (FSO) and Information Systems Security Manager (ISSM) to oversee NISP compliance and RMF-based security across multiple locations. You will implement security policies, manage SSPs in eMASS, coordinate with DoD and CSA, and lead risk assessments to protect personnel, information, and facilities.

This dual-role requires vigilance, strong documentation, and the ability to interact with program managers and engineering teams to