Navy RMF ISSM | Cybersecurity Leader for DoD Systems

ecsfederal; Virginia (MN); On-site; USD 170,000 - 190,000; Full time

Job summary

Everforth ECS is seeking an Information Systems Security Manager to lead RMF for Navy information systems in a DoD/Navy environment. The candidate will manage the RMF lifecycle, develop SSPs/SARs/POA&Ms, and coordinate with Navy Authorizing Officials and security teams.

Requirements include an active Secret clearance (TS/SCI potential), 8+ years in cybersecurity with 3+ years as ISSM/ISSO, and hands-on eMASS experience.

Qualifications

• Active Secret clearance with willingness to obtain TS/SCI.
• 8+ years of cybersecurity experience, with 3+ years as an ISSM/ senior ISSO in a DoD/Navy environment.
• Hands-on RMF experience under DoDI 8510.01 and proficiency with eMASS.
• Experience with NIST SP 800-53 Rev. 5, RMF concepts, and Navy program interfaces.

Responsibilities

• Serve as the ISSM for Navy information systems under RMF per DoDI 8510.01 and 8500.01.
• Oversee the full RMF lifecycle: categorization, control selection, implementation, assessment, authorization, and continuous monitoring.
• Develop and maintain RMF documentation: SSPs, SARs, POA&Ms, continuous monitoring strategies.
• Interface directly with Navy stakeholders (AOs, SCAs, ISOs, PMs) and manage eMASS data accuracy.
• Support audits, inspections, and cybersecurity readiness reviews (FISMA, DON CIO).
• Provide cybersecurity guidance to engineering teams and align with DevSecOps practices.
• Oversee incident response coordination per DoDI 8530.01.

Skills

RMF implementation

DoD/Navy cybersecurity

Leadership

Security risk assessment

Education

Bachelor’s degree in Cybersecurity or related field

Tools

eMASS

ACAS

HBSS

SCAP

Job description

Everforth ECS is seeking an Information Systems Security Manager to lead RMF for Navy information systems in a DoD/Navy environment. The candidate will manage the RMF lifecycle, develop SSPs/SARs/POA&Ms, and coordinate with Navy Authorizing Officials and security teams.

Requirements include an active Secret clearance (TS/SCI potential), 8+ years in cybersecurity with 3+ years as ISSM/ISSO, and hands-on eMASS experience.