isso grc lead

Job Description Overview BlueWater Federal is looking for an ISSO to prepare, update, and maintain A&A documentation in eMASS, including POA&Ms, Security Plans, and Continuous Monitoring artifacts to ensure systems remain in compliance with DoDI 8510.01 and Navy cybersecurity policy at the Naval Surface Warfare Center (NSWC), Philadelphia, PA Responsibilities 1. Collaborate with ISSMs and Navy Qualified Validators to support control implementation, validation, and risk assessments for Navy IT systems throughout their lifecycle. 2. Track and remediate vulnerabilities using tools such as VRAM; ensure timely resolution or risk acceptance is documented and approved. 3. Execute the System Level Continuous Monitoring Strategy by reviewing outputs from tools like ACAS and SIEM, updating eMASS records, and escalating concerns as needed. 4. Maintain awareness of changes to DISA STIGs, NIST guidelines, and Navy policies; ensure system configurations and documentation are kept current and reflect evolving requirements. Qualifications 1. Bachelor's degree in computer science, information technology, communications systems management, or an equivalent science, technology, engineering & mathematics (STEM) degree from an accredited college or university 2. 6+ years of experience coordinating and enacting required security changes, within various levels of an organization, ensuring compliance with published policies; conducting cybersecurity vulnerability and threat analysis; and supporting cyber incident-response by isolating potentially effected assets, initial investigation and data collection, through status updates/reporting. 3. Must have an active Secret clearance 4. Must have one of the following IAM-II certifications 5. Certified Authorization Professional (CAP) 6. CompTIA Advanced Security Practitioner (Continuing Education) (CASP+ CE 7. Certified Information Security Manager (CISM) 8. Certified Information Systems Security Professional (CISSP) (or Associate) 9. GIAC Security Leadership Certification (GSLC) 10. Certified Chief Information Security Officer (CCISO) 11. HealthCare Information Security and Privacy Practitioner (HCISPP) BlueWater Federal is proud to be an Equal Opportunity Employer. All qualified candidates will be considered without regard to race, color, religion, national origin, age, disability, sexual orientation, gender identity, status as a protected veteran, or any other characteristic protected by law. BlueWater Federal is a VEVRAA federal contractor and we request priority referral of veterans. BlueWater Federal is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, or protected veteran status and will not be discriminated against on the basis of disability.