Information System Security Officer (ISSO)

G2 Ops, Inc.; Arlington (VA); Hybrid; USD 110,000 - 135,000; Full time

Benefits offered by this job

Comprehensive benefits package

Company-paid insurance (medical,Dental

Vision insurance

Life insurance

Short/long-term disability

401(k) plan with employer matching

Paid holidays

Paid time off (PTO)

Educational assistance

Job summary

G2 Ops, Inc. is seeking an Information System Security Officer (ISSO) to support U.S. Navy submarine systems and cybersecurity authorization activities.

You will develop RMF authorizations, maintain SSPs and SARs, and manage eMASS workflows to sustain ATO readiness in line with DoD/DON policies. The role requires 3+ years of cybersecurity engineering experience, Navy RMF familiarity, and strong coordination with ISSMs, SCAs, and system owners across multiple sites.

Qualifications

• Experience developing RMF authorization packages for DoD/Navy programs.
• Strong knowledge of NIST SP 800-53 Rev. 5 and DoD cybersecurity requirements.
• Experience reviewing ACAS scans, STIG results, and security assessments.
• Ability to manage POA&Ms and evidence for continuous monitoring.
• Familiarity with SSPs, SAPs, SARs and ATO processes.
• Excellent coordination with government personnel and system owners.

Responsibilities

• Develop, review, and maintain RMF authorizations and documentation.
• Manage authorization workflows in eMASS for initial and ongoing authorizations.
• Maintain security control evidence and control allocation records.
• Evaluate vulnerabilities from ACAS/STIG findings and remediation plans.
• Prepare POA&Ms, track risks, and close corrective actions.
• Coordinate with government stakeholders to validate evidence and resolve findings.
• Conduct Security Impact Assessments for system changes and monitoring.
• Support authorization decisions and maintain program readiness.
• Contribute to Type Authorization strategies and multi-site deployments.

Skills

RMF authorization

eMASS

NIST 800-53 Rev5

DoD security requirements

ACAS/STIG reviews

POA&Ms management

SSP/SAP/SAR familiarity

coordination with government teams

risk communication

cybersecurity certifications

Education

Bachelor's degree in Cybersecurity/Engineering

Tools

eMASS

ACAS

Job description

• Location: Arlington, VA at our G2 Ops office.
• Work Setting:In-Office withRemote / Flexible Schedule Available Based on Program Requirements
• Salary Range: $110,000 - $135,000 plus comprehensive benefits package.
• Years of Industry Experience: 3+ years of relevant experience.
• Security Clearance Requirement: Must be able to obtain and maintain Active DoD SecretClearance.

About the Role

G2 Ops supports mission-critical defense and technology initiatives by solving complex operational and engineering challenges. We are seeking a motivated, collaborative Information System Security Officer (ISSO) to support U.S. Navy submarine systems and cybersecurity authorization activities.

In this role, you'll contribute to Risk Management Framework (RMF) authorization, security control compliance, and continuous monitoring activities that protect mission-critical Navy systems. You'll work closely with government program management, Information System Security Managers (ISSMs), Information System Security Engineers (ISSEs), system integrators, and other stakeholders to maintain Authorization to Operate (ATO) readiness and ensure compliance with applicable DoD/DoW and Department of the Navy cybersecurity requirements.

What You’ll Do

• Develop, review, and maintain Risk Management Framework (RMF) authorization packages, including SSPs, SAPs, SARs, and supporting cybersecurity documentation.
• Manage authorization workflows, security artifacts, and approval submissions in eMASS to support initial and ongoing authorizations, annual reviews, and ATO maintenance.
• Maintain authorization boundaries, system inventories, security control implementation statements, and control allocation documentation in accordance with NIST SP 800-53 Rev. 5 and Navy requirements.
• Evaluate cybersecurity risks through ACAS vulnerability scans, STIG compliance reviews, penetration testing findings, and security control assessments.
• Develop and maintain Plans of Action and Milestones (POA&Ms), tracking vulnerabilities, remediation efforts, risk ratings, and corrective action closure.
• Coordinate with system owners, integrators, hosting providers, and government stakeholders to validate security control evidence, assess control inheritance, and resolve assessment findings.
• Conduct Security Impact Assessments (SIAs) for system changes and support continuous monitoring, annual control assessments, contingency planning, and compliance reporting.
• Collaborate with Security Control Assessors (SCAs), ISSMs, and government stakeholders to support authorization decisions, address security findings, and maintain program readiness.
• Support Type Authorization strategies and cybersecurity requirements for Navy systems deployed across multiple sites and organizational boundaries.
• Track authorization milestones, communicate cybersecurity risks and remediation progress, and prepare decision-support materials for leadership while ensuring compliance with Navy RMF Process Guide, Navy SCA Business Rules, and applicable DoW/DON policies.

What You’ll Bring

Required Qualifications

• Bachelor's degree in Cybersecurity, Computer Engineering, Electrical Engineering, Electronics Engineering, Mathematics with a concentration in Computer Science, or equivalent qualifications.
• 3+ years of professional experience in cybersecurity engineering, including demonstrated experience supporting DoD or Navy RMF authorization activities.
• Hands-on experience developing, reviewing, and maintaining RMF authorization packages within eMASS.
• Strong working knowledge of NIST SP 800-53 Rev. 5, DoDI/DoWI 8500.01, DoDI/DoWI 8510.01, and applicable DoD/DoW and DON cybersecurity requirements.
• Experience reviewing ACAS vulnerability scans, STIG compliance results, penetration testing findings, and security assessment documentation.
• Experience managing POA&Ms, security control evidence, risk mitigation activities, and continuous monitoring requirements.
• Familiarity with SSPs, SAPs, SARs, security authorization boundaries, and ATO processes.
• Ability to coordinate effectively with government program personnel, cybersecurity assessors, system integrators, and technical stakeholders.
• Ability to communicate complex cybersecurity risks, assessment findings, and remediation recommendations clearly and accurately.
• Relevant cybersecurity certifications aligned with assigned DoW 8140workforce requirements.

Preferred Qualifications

• Experience supporting NAVSEA, NUWC, or Navy acquisition programs.
• Experience performing RMF authorization activities for submarine, shipboard, or other Navy platform systems.
• Familiarity with the Navy RMF Process Guide and Navy SCA Business Rules.
• Experience supporting Type Authorizations, multi-site deployments, or systems with complex security authorization boundaries.
• Knowledge of security control inheritance involving system integrators, external operators, or hosting providers.

Additional Considerations

• This is a full-time position supporting mission-focused customer environments.
• Outside employment or activities must not create conflicts of interest with company or customer responsibilities.

Why G2 Ops?

What makes someone choose one company over another? Compensation, benefits, meaningful work, flexibility, growth opportunities, culture?

At G2 Ops, we believe you shouldn’t have to choose.

We offer competitive pay and benefits, but what truly sets us apart is our collaborative culture. Team members support mission-focused projects alongside highly skilled technical professionals across engineering, cybersecurity, operations, and program teams.

We encourage continuous learning, cross-training, and professional growth while empowering team members to contribute ideas that improve how we work and deliver value to our customers.

At G2 Ops, your contributions matter to our customers’ missions and to the continued success of our team.

Compensation & Benefits.

The annual salary range for this position is $110,000 – $135,000, depending on qualifications and experience.

G2 Ops offers a competitive compensation and benefits package designed to support our employees both personally and professionally, including:

• 100% company-paid insurance for medical, dental, and vision for eligible employees and family members
• 100% company-paid insurance for life, short-term disability (STD), and long-term disability (LTD) for eligible employees
• 401(k) plan with discretionary employer matching
• 10 paid holidays
• Paid time off (PTO)
• Educational assistance

In addition, we provide professional development opportunities, performance recognition programs, and resources that support long-term career growth and work-life balance.

AI at G2 Ops.

At G2 Ops, we don’t just talk about AI — we actively use it to improve how we work.

Our teams are integrating AI into engineering, cybersecurity, operations, and decision-making workflows. We continue to invest in secure AI tooling aligned with government security requirements while developing practical, mission-focused applications across the company.

Whether your role is technical or operational, you’ll have opportunities to explore how AI can enhance efficiency, innovation, and mission impact.

Work Environment.

Because we support classified and mission-critical DoD programs, many roles require onsite collaboration at G2 Ops offices and/or customer locations. Depending on program requirements, telework and flexible scheduling options may be available.

We’ve built a collaborative environment where team members can learn, contribute, and grow while supporting meaningful customer missions.