Information Systems Security Officer

acuCyber; North Charleston (SC); On-site; USD 90,000 - 130,000; Full time

Job summary

acuCyber is seeking an experienced Information Systems Security Officer (ISSO) to support RMF/A&A activities for NIWC Atlantic. The role emphasizes guiding packages through the RMF process toward Authority to Operate (ATO) and ongoing continuous monitoring.

The ISSO will develop and maintain documentation (SSPs, SARs, POA&Ms), gather artifacts in eMASS, and support annual reviews and IV&V efforts. On-site in North Charleston, SC with occasional telework approval.

Qualifications

• Experience as an ISSO supporting RMF A&A programs.
• Familiar with NIST SP 800-53 Rev5 controls.
• Experience with eMASS and security documentation.

Responsibilities

• Develop, review, and maintain A&A documentation including SSPs, SARs, and POA&M.
• Gather and upload artifacts within eMASS.
• Support security events including ASR and IV&V processes.
• Maintain system-level POA&Ms on an ongoing basis.

Skills

RMF knowledge

A&A expertise

Security documentation

Artifact collection

Tools

eMASS

POA&M tracking

Job description

acuCyber is seeking an experienced Information Systems Security Officer (ISSO) to support the Naval Information Warfare Center Atlantic (NIWC Atlantic) Expeditionary Enterprise Systems and Services (E2S2) Division. NIWC Atlantic provides design, acquisition, and sustainment services for Marine Corps Systems Command (MCSC) Information Technology (IT) systems.

The ISSO Contractor role will serve as a primary cybersecurity and Risk Management Framework (RMF) specialist, supporting the Portfolio Acquisition Executive Mission Systems (PAE MS) Information Systems Security Manager (ISSM). This position is an Assessment and Authorization (A&A) focused role. The ISSO will help guide packages through the RMF process, with the goal of obtaining accreditation by Authority to Operate (ATO) and maintaining continuous monitoring on each package.

Job Responsibilities include:

• Develop, review, and maintain A&A documentation including NIST SP 800-53 Rev5 Controls, System Security Plans (SSPs), Security Assessment Reports (SARs), and Plan of Action and Milestones (POA&M).
• Gather and upload artifacts, as well as main system information within eMASS.
• Support setting up, executing, and processing results of important security events including Annual Security Reviews (ASR) and Independent Verification and Validation (IV&V).
• Maintaining system level POA&Ms on a continuous basis.

Location & Telework:

This position requires full-time, on-site performance in North Charleston, SC and may be eligible for a maximum of one (1) day of telework per week, subject to Government and management approval and mission requirements.