Information Systems Security Officer

McLaughlin Research Corp.; Middletown (RI); On-site; USD 110,000 - 150,000; Full time

Job summary

McLaughlin Research Corp. in Middletown, RI seeks an experienced Information Systems Security Officer to support a DoD cloud environment and RMF lifecycle. The role requires coordinating with government stakeholders, engineering teams, and program leadership to obtain and maintain Navy ATO compliance.

The ISSO will guide the system through RMF, manage security artifacts, and ensure DoD cybersecurity requirements are met across Azure Government or AWS GovCloud environments.

Qualifications

• Active Secret Security Clearance.
• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or related discipline (or equivalent experience).
• 5+ years supporting DoD cybersecurity programs.
• Demonstrated experience implementing the DoD RMF.
• Extensive experience with Navy ATO processes.
• Strong working knowledge of: NIST SP 800-53; DoD RMF; Security Controls Assessment process; POA&M management; Continuous Monitoring.
• Experience using eMASS.
• Active DoD CAC (preferred) or ability to obtain eMASS access.
• Experience implementing and remediating Security Technical Implementation Guides (STIGs).
• Familiarity with Microsoft Azure Government and/or AWS GovCloud.
• Understanding of FedRAMP security requirements and cloud compliance.
• Working knowledge of the DoD Cloud Computing Security Requirements Guide (Cloud SRG).
• Excellent communication and documentation skills.

Responsibilities

• Lead cybersecurity activities throughout RMF lifecycle.
• Manage the development, review, and maintenance of RMF artifacts and authorization documentation.
• Serve as the primary ISSO supporting Navy ATO.
• Coordinate with AO, ISSM, validators, and cybersecurity representatives.
• Build and maintain relationships with Navy cybersecurity organizations to facilitate the authorization process.
• Utilize eMASS to manage security controls, documentation, findings, and authorization packages.
• Coordinate STIG implementation across Windows, Linux, networking, and cloud environments.
• Conduct security control assessments against NIST SP 800-53 requirements.
• Support vulnerability management, POA&M development, and continuous monitoring activities.
• Collaborate with engineering teams to implement secure cloud architectures within Azure Government and/or AWS GovCloud.
• Assist with DoD Cloud Security Requirements Guide (Cloud SRG) compliance activities.
• Support future Secret-level accreditation efforts and classified system expansion.
• Provide cybersecurity guidance throughout system design, implementation, and operational phases.
• Develop executive-level status reports and communicate cybersecurity risks to technical and non-technical stakeholders.

Skills

RMF expertise

DoD cybersecurity

Cloud security

Navy ATO experience

Communication

Education

Bachelor's Degree

Tools

eMASS

NIST SP 800-53

STIGs

Job description

Apply to One of Our Current Openings to Start or Continue Your Career at MRC

If you’re interested in applying for a position at McLaughlin Research Corporation, browse our list of current openings below. You can then learn more about each position and apply with us today. Whether you’re just starting out or want to continue to grow in your career, we offer plenty of opportunities for both professional and personal growth here at MRC. We’re ready to welcome you to our growing team.

Information Systems Security Officer - (COSYSANSR_COMPANY_1.1)

Share this job as a link in your status update to LinkedIn.

Job Title

Information Systems Security Officer

Location

Middletown, RI 02842 US (Primary)

Job Type / Status

Full-Time

Education

Bachelor's Degree

Clearance Level Required

Secret

Job Description

We are seeking an experienced Information Systems Security Officer (ISSO) to support cybersecurity compliance and accreditation activities supporting a Department of Defense (DoD) cloud environment. The ideal candidate will possess extensive experience navigating the Navy Authorization to Operate (ATO) process and will serve as a cybersecurity resource responsible for guiding the system through the DoD Risk Management Framework (RMF) lifecycle.

This position will work closely with government stakeholders, engineering teams, cloud architects, and program leadership to achieve and maintain authorization while ensuring compliance with DoD cybersecurity requirements.

Primary Responsibilities:

• Lead cybersecurity activities throughout the DoD Risk Management Framework (RMF) lifecycle.
• Manage the development, review, and maintenance of RMF artifacts and authorization documentation.
• Serve as the primary ISSO supporting the achievement of a Navy Authorization to Operate (ATO).
• Coordinate directly with government Authorizing Officials (AO), Information System Security Managers (ISSM), validators, and cybersecurity representatives.
• Build and maintain effective working relationships with Navy cybersecurity organizations to facilitate the authorization process.
• Utilize eMASS to manage security controls, documentation, findings, and authorization packages.
• Coordinate Security Technical Implementation Guide (STIG) implementation and validation across Windows, Linux, networking, and cloud environments.
• Conduct security control assessments against NIST SP 800-53 requirements.
• Support vulnerability management, POA&M development, and continuous monitoring activities.
• Collaborate with engineering teams to implement secure cloud architectures within Azure Government and/or AWS GovCloud.
• Assist with DoD Cloud Security Requirements Guide (SRG) compliance activities.
• Support future Secret-level accreditation efforts and classified system expansion.
• Provide cybersecurity guidance throughout system design, implementation, and operational phases.
• Develop executive-level status reports and communicate cybersecurity risks to technical and non-technical stakeholders.

Job Requirements

• Active Secret Security Clearance
• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or related discipline (or equivalent experience)
• 5+ years supporting DoD cybersecurity programs
• Demonstrated experience implementing the DoD Risk Management Framework (RMF)
• Extensive experience with Navy Authorization to Operate (ATO) processes
• Strong working knowledge of:
  • NIST SP 800-53
  • DoD RMF
  • Security Controls Assessment process
  • POA&M management
  • Continuous Monitoring
• Experience using eMASS
• Active DoD CAC (preferred) or ability to obtain eMASS access
• Experience implementing and remediating Security Technical Implementation Guides (STIGs)
• Familiarity with Microsoft Azure Government and/or AWS GovCloud
• Understanding of FedRAMP security requirements and cloud compliance
• Working knowledge of the DoD Cloud Computing Security Requirements Guide (Cloud SRG)
• Excellent communication and documentation skills

Highly Desired Qualifications:

• Extensive experience obtaining Navy ATOs
• Existing relationships within Navy cybersecurity organizations
• Current Navy CAC with Flank Speed access
• Ability to access SIPRNet on a regular basis
• Experience supporting Secret or higher classified information systems
• TS/SCI Security Clearance
• CISSP, CAP, Security+, CASP+, or equivalent DoD 8570/8140 certifications