GRC Lead: Cybersecurity Compliance & Risk Oversight

BlueWater Federal Solutions; Philadelphia (Philadelphia County); On-site; USD 120,000 - 180,000; Full time

Job summary

BlueWater Federal Solutions seeks an Information System Security Officer (ISSO) to prepare, update, and maintain A&A documentation in eMASS, including POA&Ms, Security Plans, and Continuous Monitoring artifacts for NSWC Philadelphia, PA.

The role requires coordinating security changes, vulnerability remediation, and monitoring activities across Navy IT systems, with a focus on compliance with DoDI 8510.01 and Navy policy. Active Secret clearance is mandatory.

Qualifications

• Bachelor's degree in computer science, information technology, communications systems management, or equivalent STEM field.
• 6+ years coordinating security changes and ensuring policy compliance; performing vulnerability/threat analysis.
• Active Secret clearance required.
• One of IAM-II certifications: CAP, CASP+ CE, CISM, CISSP (or Associate), GSLC, CCISO, HCISPP.

Responsibilities

• Collaborate with ISSMs and Navy Validators to support control implementation, validation, and risk assessments for Navy IT systems throughout their lifecycle.
• Track and remediate vulnerabilities using tools such as VRAM; ensure timely resolution or risk acceptance is documented and approved.
• Execute the System Level Continuous Monitoring Strategy by reviewing outputs from ACAS and SIEM, updating eMASS records, and escalating concerns as needed.
• Maintain awareness of changes to DISA STIGs, NIST guidelines, and Navy policies; ensure configurations and documentation reflect evolving requirements.

Skills

Active Secret Clearance

Security Compliance

6+ Years Experience

A&A Documentation

Education

Bachelor's degree (STEM)

Job description

BlueWater Federal Solutions seeks an Information System Security Officer (ISSO) to prepare, update, and maintain A&A documentation in eMASS, including POA&Ms, Security Plans, and Continuous Monitoring artifacts for NSWC Philadelphia, PA.

The role requires coordinating security changes, vulnerability remediation, and monitoring activities across Navy IT systems, with a focus on compliance with DoDI 8510.01 and Navy policy. Active Secret clearance is mandatory.