Navy RMF ISSM — Lead DoD Cybersecurity & ATO

ECS; Fairfax (VA); On-site; USD 170,000 - 190,000; Full time

Job summary

Everforth ECS seeks an Information Systems Security Manager to support U.S. Navy systems from our Fairfax, VA office. The ISSM will lead RMF activities, manage eMASS accreditation, and advise on cybersecurity risk across the SDLC.

The ideal candidate will have 8+ years in cybersecurity with 3+ years as an ISSM/ senior ISSO in a DoD/Navy environment, strong RMF, NIST, and eMASS expertise. Salary range reflected for this critical national security role.

Qualifications

• Active Secret security clearance required; TS/SCI desired.
• Bachelor’s degree in Cybersecurity, IT, or related field.

Responsibilities

• Serve as the ISSM for Navy information systems per RMF DoDI 8510.01/8500.01.
• Oversee the full RMF lifecycle: categorization, control selection, implementation, assessment, authorization, and continuous monitoring.
• Develop and manage RMF documentation: SSPs, SARs, POA&Ms, Continuous Monitoring Strategies.
• Ensure compliance with NIST SP 800-53 Rev. 5, SP 800-37 Rev. 2, DoD/DON cybersecurity manuals.
• Interface with Navy stakeholders including AOs, SCAs, ISOs, PMs.
• Manage system accreditation activities within eMASS; ensure data accuracy.
• Conduct security control assessments, vulnerability management, and mitigation tracking.
• Ensure compliance with DISA STIGs and SRGs; support audits and inspections.
• Provide cybersecurity guidance to engineering teams across SDLC; support DevSecOps.
• Oversee incident response coordination per DoDI 8530.01.

Skills

Secret clearance

RMF knowledge

eMASS experience

NIST SP 800-53 Rev.5

NIST SP 800-37 Rev. 2

DoD/Navy RMF experience

RMF lifecycle management

ACAS

Education

Bachelor’s degree in Cybersecurity or related field

Tools

eMASS

ACAS

HBSS

Job description

Everforth ECS seeks an Information Systems Security Manager to support U.S. Navy systems from our Fairfax, VA office. The ISSM will lead RMF activities, manage eMASS accreditation, and advise on cybersecurity risk across the SDLC.

The ideal candidate will have 8+ years in cybersecurity with 3+ years as an ISSM/ senior ISSO in a DoD/Navy environment, strong RMF, NIST, and eMASS expertise. Salary range reflected for this critical national security role.