Information Systems Security Manager - AWS Cloud

ECS Corporate Services; Groton (CT); On-site; USD 170,000 - 190,000; Full time

Job summary

Everforth ECS seeks an Information Systems Security Manager to lead RMF for Navy information systems in the Groton, CT area. The role focuses on RMF lifecycle management, documentation, and coordination with Navy stakeholders to maintain ATO status.

The ideal candidate will have 8+ years in cybersecurity, DoD/Navy RMF experience, and hands-on eMASS knowledge, with strong writing and leadership abilities to guide the technical team.

Qualifications

• Bachelor's degree or equivalent experience in cybersecurity
• 8+ years cybersecurity experience, 3+ years as ISSM/senior ISSO in a DoD/Navy environment
• AWS GovCloud experience
• Strong RMF implementation under DoDI 8510.01
• Hands-on with eMASS
• Knowledge of NIST SP 800-53 Rev.5 and 800-37 Rev.2
• Experience with Navy programs (NAVWAR, NAVAIR, NAVSEA)
• Familiarity with DISA STIGs and SCAP tools
• Understanding of cloud/hybrid architectures
• Experience with Terraform

Responsibilities

• Serve as the ISSM for Navy information systems under RMF
• Oversee full RMF lifecycle: categorization, control selection, implementation, assessment, authorization, continuous monitoring
• Develop and manage RMF documentation: SSPs, SARs, POA&Ms, continuous monitoring strategies
• Ensure compliance with NIST SP 800-53 Rev.5, 800-37 Rev.2, and DoD/Navy cybersecurity manuals
• Coordinate with Navy stakeholders (AOs, SCAs, ISOs, PMs)
• Manage accreditation activities in eMASS and ensure data accuracy
• Conduct security control assessments, vulnerability management, and mitigation tracking
• Ensure compliance with STIGs and SRGs from DISA
• Support audits, inspections, cybersecurity readiness reviews
• Provide cybersecurity guidance to engineering teams across SDLC aligning with DevSecOps
• Oversee incident response coordination per DoDI 8530.01 and Navy procedures

Skills

RMF Lifecycle Management

NIST SP 800-53 Rev.5

DoD RMF Guidance (DoDI 8510.01)

Threat & Vulnerability Assessment

Communication with Navy Stakeholders

Team Leadership

Education

Bachelor's degree in Cybersecurity or related field

Tools

eMASS

AWS GovCloud

Terraform

ACAS

HBSS

Job description

Everforth ECS is seeking an Information Systems Security Manager to work in Groton, Connecticut office. Everforth ECS is seeking an experienced Information System Security Manager (ISSM) to support U.S. Navy systems and programs. The ISSM will serve as the primary cybersecurity authority for assigned systems, ensuring compliance with Department of Defense (DoD) and Department of the Navy (DON) cybersecurity policies under the Risk Management Framework (RMF).

The ideal candidate will have deep experience supporting Navy Authorizing Officials (AOs), working within Navy/DoD environments such as NAVWAR, NAVAIR, NAVSEA, or Fleet Cyber Command, and maintaining system authorization packages in eMASS. The ISSM will lead the preparations and interactions with the government for system security assessments and ensure the IS maintains its Authority to Operate (ATO). The ISSM will manage the implementation of security policies, conduct risk assessments, manage security controls, and Plan of Actions and Milestones (POAM). The ISSM is expected to advise senior management on cybersecurity issues, communicate security risks, and collaborate with technical teams and other stakeholders. The successful candidate is able to multitask; assume ownership and accountability of risks, issues, and tasks; and successfully manage and resolve those risks, issues, and tasks to completion. The successful candidate is also able to work well in a team-oriented environment; self-manage his/her own tasks; and provide hands‑on guidance, direction, and mentoring to the technical team. Finally, the successful candidate is extremely well‑organized, well written, has a keen eye for detail, and can clearly articulate information (both orally and in writing) to customers, stakeholders, peers, and leadership within and external to the Program and organization.

Key Responsibilities

• Serve as the ISSM for Navy information systems in accordance with DoDI 8510.01 (RMF) and DoDI 8500.01 (Cybersecurity)
• Oversee the full RMF lifecycle: categorization, control selection, implementation, assessment, authorization, and continuous monitoring
• Develop, maintain, and manage RMF documentation including: System Security Plans (SSPs) Security Assessment Reports (SARs) Plan of Action & Milestones (POA&Ms) Continuous Monitoring Strategies
• Ensure compliance with: NIST SP 800-53 Rev. 5 security controls NIST SP 800-37 Rev. 2 (RMF Guide) DoD Cybersecurity Manual (DoDM 5200.01) SECNAV M-5239.1 (Department of the Navy Cybersecurity Manual)
• Interface directly with Navy stakeholders including: Authorizing Officials (AOs) Security Control Assessors (SCAs) Information System Owners (ISOs) Program Managers (PMs)
• Manage system accreditation activities within eMASS and ensure data accuracy and completeness
• Conduct and support security control assessments, vulnerability management, and mitigation tracking
• Ensure compliance with STIGs (Security Technical Implementation Guides) and SRGs (Security Requirements Guides) from DISA
• Support audits, inspections, and cybersecurity readiness reviews (e.g., FISMA, DON CIO inspections)
• Provide cybersecurity guidance to engineering teams throughout system development lifecycle (SDLC), aligning with DevSecOps practices where applicable
• Oversee incident response coordination in alignment with DoDI 8530.01 (Cyber Incident Response) and Navy procedures

Salary Range

$170,000-190,000

General Description of Benefits

• Active Secret security clearance with willingness and ability to obtain TS/SCI

Required Experience and Qualifications

• Bachelor's degree in Cybersecurity, Information Technology, or related field (or equivalent experience)
• 8+ years of cybersecurity experience, with 3+ years as an ISSM or senior ISSO in a DoD/Navy environment
• Required experience with AWS GovCloud
• Strong experience implementing RMF under DoDI 8510.01 (latest version)
• Hands‑on experience with eMASS
• In-depth knowledge of: NIST SP 800-53 Rev. 5 controls NIST SP 800-37 Rev. 2 DoDI 8500.01 / 8510.01
• SECNAV M-5239.1 Experience supporting Navy programs (e.g., NAVWAR, NAVAIR, NAVSEA, or USMC systems)
• Familiarity with: DISA STIGs and SCAP compliance tools ACAS (Assured Compliance Assessment Solution) HBSS / Endpoint Security Solutions
• Strong understanding of system architectures (on‑prem, cloud, hybrid)
• Strong understanding of AWS and Terraform