Senior ISSO: DoD Cyber Compliance & eMASS Expert

BlueWater Federal Solutions Inc.; Philadelphia (Philadelphia County); On-site; USD 120,000 - 170,000; Full time

Job summary

BlueWater Federal Solutions Inc. is seeking an ISSO to prepare, update, and maintain A&A documentation in eMASS for Navy IT systems based at NSWC, Philadelphia, PA.

The role focuses on POA&Ms, Security Plans, and Continuous Monitoring artifacts under DoDI 8510.01 and Navy policy. The ideal candidate will coordinate security changes with ISSMs and validators, remediate vulnerabilities, and maintain current documentation in line with DISA STIGs and NIST guidelines.

Qualifications

• Bachelor's degree in CS/IT/communications systems management or equivalent STEM degree.
• 6+ years coordinating and enacting security changes and risk assessments; supporting cyber incident-response.
• Active Secret clearance required.
• One of these IAM-II certifications: CAP, CASP+ CE, CISM, CISSP (or Associate), GSLC, CCISO, HCISPP.

Responsibilities

• Collaborate with ISSMs and Navy Validators to support control implementation, validation, and risk assessments across lifecycle of Navy IT systems.
• Track and remediate vulnerabilities using VRAM; ensure timely resolution or risk acceptance is documented and approved.
• Review outputs from ACAS and SIEM to execute the System Level Continuous Monitoring Strategy and update eMASS records.
• Maintain awareness of changes to DISA STIGs, NIST guidelines, and Navy policies; ensure configurations and documentation reflect evolving requirements.

Education

Bachelor's degree in computer science, information technology, communications systems management, or an equivalent STEM degree

Tools

VRAM

ACAS

SIEM

Job description

BlueWater Federal Solutions Inc. is seeking an ISSO to prepare, update, and maintain A&A documentation in eMASS for Navy IT systems based at NSWC, Philadelphia, PA.

The role focuses on POA&Ms, Security Plans, and Continuous Monitoring artifacts under DoDI 8510.01 and Navy policy. The ideal candidate will coordinate security changes with ISSMs and validators, remediate vulnerabilities, and maintain current documentation in line with DISA STIGs and NIST guidelines.