Information Systems Security Officer (ISSO)

ERT, Inc.; North Charleston (SC); On-site; USD 89,000 - 121,000; Full time

Job summary

Entarian in North Charleston, SC is seeking an experienced Information Systems Security Officer (ISSO) to support NIWC Atlantic’s E2S2 division. The role focuses on RMF/A&A processes, SSPs, and accreditation efforts toward Authority to Operate (ATO) with continuous monitoring.

Qualifications include active Top Secret clearance, DoD 8570.1M IAM/IAT/IASAE Level I certification, and deep experience with eMASS, STIGs, and vulnerability remediation. On-site with limited telework.

Qualifications

• Must meet one of two tracks: Bachelor's degree + 3+ years in cybersecurity policy & A&A compliance; or HS diploma + 10+ years professional technical problem-solving experience.
• Direct experience preparing, implementing, and ensuring compliance with cybersecurity policies and A&A requirements.
• A strong foundation in engineering, software lifecycle maintenance, and fabrication methodologies.

Responsibilities

• Develop and maintain RMF/A&A documentation (SSPs, SARs, POA&Ms).
• Gather artifacts and upload to eMASS.
• Support security events including Annual Security Reviews (ASR) and Independent Verification and Validation (IV&V).
• Maintain system-level POA&Ms continuously.

Skills

RMF expertise

A&A lifecycle management

SSP drafting

eMASS / MCCAST

IAVM / STIG remediation

Education

Bachelor's degree in Cybersecurity or related field

High school diploma / 10+ years experience

Tools

N/A

Job description

Information Systems Security Officer (ISSO)

• ID: 2026-9974
• Type: Full Time W/Benefits Ret Match
• Location: US-SC-North Charleston
• Security Clearance: Top Secret

Overview / Job Responsibilities

Entarian is seeking an experienced Information Systems Security Officer (ISSO) to support the Naval Information Warfare Center Atlantic (NIWC Atlantic) Expeditionary Enterprise Systems and Services (E2S2) Division. NIWC Atlantic provides design, acquisition, and sustainment services for Marine Corps Systems Command (MCSC) Information Technology (IT) systems.

The ISSO Contractor role will serve as a primary cybersecurity and Risk Management Framework (RMF) specialist, supporting the Portfolio Acquisition Executive Mission Systems (PAE MS) Information Systems Security Manager (ISSM). This position is an Assessment and Authorization (A&A) focused role. The ISSO will help guide packages through the RMF process, with the goal of obtaining accreditation by Authority to Operate (ATO) and maintaining continuous monitoring on each package.

Job Responsibilities

• Develop, review, and maintain A&A documentation including NIST SP 800-53 Rev5 Controls, System Security Plans (SSPs), Security Assessment Reports (SARs), and Plan of Action and Milestones (POA&M).
• Gather and upload artifacts, as well as main system information within eMASS.
• Support setting up, executing, and processing results of important security events including Annual Security Reviews (ASR) and Independent Verification and Validation (IV&V).
• Maintaining system level POA&Ms on a continuous basis.

Salary Range: Approximately $89,000.00 - $121,000.00/year.

Location & Telework

This position requires full-time, on-site performance in North Charleston, SC and may be eligible for a maximum of one (1) day of telework per week, subject to Government and management approval and mission requirements.

Minimum Qualifications

• Clearance Required
  • Active U.S. Government Top Secret security clearance
• Education & Experience
  • Education & Experience: Must meet one of the following tracks:
  • A Bachelor's degree in Cybersecurity, Computer Engineering, Electrical Engineering, Electronics Engineering, Mathematics (with a CS concentration), or equivalent, PLUS 3+ years of experience in cybersecurity policy and Assessment & Authorization (A&A) compliance.
  • High School diploma, GED, trade school graduate, or 4 years of equivalent military service, PLUS 10+ years of professional technical problem-solving experience.
  • Core Technical Requirements (Required for both tracks):
  • Direct experience preparing, implementing, and ensuring compliance with cybersecurity policies and A&A requirements.
  • A strong practical foundation in engineering, software lifecycle maintenance, and fabrication methodologies.
• Certification Requirements
  • Individual shall be certified as Information Assurance Management (IAM) or Information Assurance Technical (IAT) or Information Assurance System Architect and Engineer (IASAE) Level I (position-based) per DoD 8570.1M
• Technical Skills
  • Extensive experience drafting system security plans (SSPs), executing continuous monitoring strategies, and defending packages directly to the Navy Authorizing Official (AO) or functional Security Control Assessor (SCA).
  • Comprehensive experience managing the full Assessment & Authorization (A&A) lifecycle, including preparing and maintaining DoD RMF accreditation packages in strict compliance with DoDI 8510.01, NIST SP 800-53 Rev 5, CNSSI 1253, and ICD 503.
  • Hands-on experience utilizing automated tools such as eMASS and/or MCCAST to govern accreditation packages and navigate complex system workflows.
  • Demonstrated expertise in documenting, analyzing, and remediating system vulnerabilities in accordance with Information Assurance Vulnerability Management (IAVM) notices and DISA Security Technical Implementation Guides (STIGs).

Desired Qualifications

• Government & Compliance
  • DoD/IC Experience: Experience supporting DoD, Intelligence Community, or classified government systems.
  • RMF Expertise: Demonstrated experience engineering NIST RMF controls and producing RMF artifacts.
• Security Architecture & Engineering
  • Secure Systems Design: Strong understanding of secure systems engineering, defense-in-depth, Zero Trust architectures, and large-scale distributed systems.
  • Core Technologies: Experience with operating systems, networking, virtualization, cloud, IAM, encryption, and cybersecurity technologies.
  • Vulnerability Management: Experience conducting vulnerability assessments using ACAS, Nessus, SCAP, or similar tools.
• Professional Skills & Certifications
  • Certifications: Active security certifications (e.g., Security+, CISSP, CASP+, CCSP, GIAC, or IASAE).
  • Communication: Strong technical writing and verbal skills to convey complex cybersecurity concepts to both technical and leadership audiences.

About Us

Formed through the strategic union of Sev1Tech and ERT, Entarian is a premier provider of mission-critical engineering and technology solutions. Founded on a legacy of excellence dating back to 1993, Entarian is a product of an evolved and fully diversified engineering and federal technology leader. From deep space to defense and civilian missions, Entarian delivers secure, mission-aligned digital solutions that drive national resilience and operational effectiveness. We don't just support modernization; we define it.

Join the Mission and Start your Career Journey

Entarian is an Equal Opportunity and AffID? All qualified applicants will receive consideration for employment without regard to race, color