Information System Security Officer (ISSO)

G2 Ops, Inc.; Virginia Beach (VA); Hybrid; USD 105,000 - 130,000; Full time

Benefits offered by this job

Medical/dental/vision insurance

Life insurance

401(k) with employer matching

Paid holidays

Paid time off

Educational assistance

Job summary

G2 Ops, Inc. is seeking an Information System Security Officer (ISSO) to support U.S. Navy submarine systems and cybersecurity authorization activities.

You will contribute to RMF authorization, security control compliance, and continuous monitoring, collaborating with ISSMs, ISSEs, and government stakeholders to maintain ATO readiness. Responsibilities include RMF package development, eMASS submissions, risk assessment, and action tracking, ensuring adherence to DoD/DON policies while

Qualifications

• Bachelor's degree in Cybersecurity, Computer Engineering, Electrical Engineering, Electronics Engineering, Mathematics with a concentration in CS, or equivalent.
• 3+ years of professional cybersecurity engineering with DoD/Navy RMF experience.
• Hands‑on RMF packages development in eMASS.
• Strong knowledge of NIST SP 800-53 Rev.5 and Navy requirements.
• Experience reviewing ACAS STIG tests and security docs.
• Experience managing POA&Ms and continuous monitoring.
• Familiarity with SSPs, SAPs, SARs, and ATO processes.
• Ability to coordinate with government and technical stakeholders.
• Relevant cybersecurity certifications aligned with DoW 8140.

Responsibilities

• Develop RMF authorization packages (SSPs, SAPs, SARs) and related docs.
• Manage RMF workflows and submissions in eMASS for ATO readiness.
• Maintain security controls per NIST/Navy requirements.
• Evaluate ACAS/STIG results and penetration findings.
• Develop and track POA&Ms and remediation actions.
• Coordinate with program personnel and system integrators.
• Conduct SIAs and support continuous monitoring and reporting.
• Assist in authorization decisions and RMF process adherence.
• Prepare leadership materials on cybersecurity risk and status.

Skills

RMF authorization

eMASS

NIST SP 800-53 Rev.5

DoD/Navy cyber requirements

ACAS/STIG/pen testing

POA&Ms management

Coordination with government personnel

Education

Bachelor's degree in Cybersecurity or related field

Tools

eMASS

ACAS

NIST SP 800-53 Rev.5

STIG compliance

RMF process

Job description

• Location: Virginia Beach, VA at our G2 Ops office.
• Work Setting:In-Office withRemote / Flexible Schedule Available Based on Program Requirements
• Salary Range: $105,000 - $130,000 plus comprehensive benefits package.
• Years of Industry Experience: 3+ years of relevant experience.
• Security Clearance Requirement: Must be able to obtain and maintain Active DoD Secret Clearance.

About the Role

G2 Ops supports mission-critical defense and technology initiatives by solving complex operational and engineering challenges. We are seeking a motivated, collaborative Information System Security Officer (ISSO) to support U.S. Navy submarine systems and cybersecurity authorization activities.

In this role, you'll contribute to Risk Management Framework (RMF) authorization, security control compliance, and continuous monitoring activities that protect mission-critical Navy systems. You'll work closely with government program management, Information System Security Managers (ISSMs), Information System Security Engineers (ISSEs), system integrators, and other stakeholders to maintain Authorization to Operate (ATO) readiness and ensure compliance with applicable DoD/DoW and Department of the Navy cybersecurity requirements.

What You’ll Do

• Develop, review, and maintain Risk Management Framework (RMF) authorization packages, including SSPs, SAPs, SARs, and supporting cybersecurity documentation.
• Manage authorization workflows, security artifacts, and approval submissions in eMASS to support initial and ongoing authorizations, annual reviews, and ATO maintenance.
• Maintain authorization boundaries, system inventories, security control implementation statements, and control allocation documentation in accordance with NIST SP 800-53 Rev. 5 and Navy requirements.
• Evaluate cybersecurity risks through ACAS vulnerability scans, STIG compliance reviews, penetration testing findings, and security control assessments.
• Develop and maintain Plans of Action and Milestones (POA&Ms), tracking vulnerabilities, remediation efforts, risk ratings, and corrective action closure.
• Coordinate with system owners, integrators, hosting providers, and government stakeholders to validate security control evidence, assess control inheritance, and resolve assessment findings.
• Conduct Security Impact Assessments (SIAs) for system changes and support continuous monitoring, annual control assessments, contingency planning, and compliance reporting.
• Collaborate with Security Control Assessors (SCAs), ISSMs, and government stakeholders to support authorization decisions, address security findings, and maintain program readiness.
• Support Type Authorization strategies and cybersecurity requirements for Navy systems deployed across multiple sites and organizational boundaries.
• Track authorization milestones, communicate cybersecurity risks and remediation progress, and prepare decision-support materials for leadership while ensuring compliance with Navy RMF Process Guide, Navy SCA Business Rules, and applicable DoW/DON policies.

What You’ll Bring

Required Qualifications

• Bachelor's degree in Cybersecurity, Computer Engineering, Electrical Engineering, Electronics Engineering, Mathematics with a concentration in Computer Science, or equivalent qualifications.
• 3+ years of professional experience in cybersecurity engineering, including demonstrated experience supporting DoD or Navy RMF authorization activities.
• Hands‑on experience developing, reviewing, and maintaining RMF authorization packages within eMASS.
• Strong working knowledge of NIST SP 800-53 Rev. 5, DoDI/DoWI 8500.01, DoDI/DoWI 8510.01, and applicable DoD/DoW and DON cybersecurity requirements.
• Experience reviewing ACAS vulnerability scans, STIG compliance results, penetration testing findings, and security assessment documentation.
• Experience managing POA&Ms, security control evidence, risk mitigation activities, and continuous monitoring requirements.
• Familiarity with SSPs, SAPs, SARs, security authorization boundaries, and ATO processes.
• Ability to coordinate effectively with government program personnel, cybersecurity assessors, system integrators, and technical stakeholders.
• Ability to communicate complex cybersecurity risks, assessment findings, and remediation recommendations clearly and accurately.
• Relevant cybersecurity certifications aligned with assigned DoW 8140 workforce requirements.

Preferred Qualifications

• Experience supporting NAVSEA, NUWC, or Navy acquisition programs.
• Experience performing RMF authorization activities for submarine, shipboard, or other Navy platform systems.
• Familiarity with the Navy RMF Process Guide and Navy SCA Business Rules.
• Experience supporting Type Authorizations, multi-site deployments, or systems with complex security authorization boundaries.
• Knowledge of security control inheritance involving system integrators, external operators, or hosting providers.

Additional Considerations

• This is a full-time position supporting mission-focused customer environments.
• Outside employment or activities must not create conflicts of interest with company or customer responsibilities.

Why G2 Ops?

What makes someone choose one company over another? Compensation, benefits, meaningful work, flexibility, growth opportunities, culture?

At G2 Ops, we believe you shouldn’t have to choose.

We offer competitive pay and benefits, but what truly sets us apart is our collaborative culture. Team members support mission-focused projects alongside highly skilled technical professionals across engineering, cybersecurity, operations, and program teams.

We encourage continuous learning, cross-training, and professional growth while empowering team members to contribute ideas that improve how we work and deliver value to our customers.

At G2 Ops, your contributions matter to our customers’ missions and to the continued success of our team.

Compensation & Benefits.

The annual salary range for this position is $105,000 – $130,000, depending on qualifications and experience.

G2 Ops offers a competitive compensation and benefits package designed to support our employees both personally and professionally, including:

• 100% company-paid insurance for medical, dental, and vision for eligible employees and family members
• 100% company-paid insurance for life, short-term disability (STD), and long-term disability (LTD) for eligible employees
• 401(k) plan with discretionary employer matching
• 10 paid holidays
• Paid time off (PTO)
• Educational assistance

In addition, we provide professional development opportunities, performance recognition programs, and resources that support long-term career growth and work-life balance.

AI at G2 Ops.

At G2 Ops, we don’t just talk about AI — we actively use it to improve how we work.

Our teams are integrating AI into engineering, cybersecurity, operations, and decision‑making workflows. We continue to invest in secure AI tooling aligned with government security requirements while developing practical, mission‑focused applications across the company.

Whether your role is technical or operational, you’ll have opportunities to explore how AI can enhance efficiency, innovation, and mission impact.

Work Environment.

Because we support classified and mission-critical DoD programs, many roles require onsite collaboration at G2 Ops offices and/or customer locations. Depending on program requirements, telework and flexible scheduling options may be available.

We’ve built a collaborative environment where team members can learn, contribute, and grow while supporting meaningful customer missions.