(603) Information System Security Officer (ISSO) III

The role

The Information System Security Officer (ISSO) III will coordinate cybersecurity processes and activities for assigned systems. This role ensures compliance with policies and manages security controls implementation throughout the Risk Management Framework (RMF) lifecycle for NSWCPD Code 104.

What you will do

• Assist Information System Security Managers in executing duties
• Ensure compliance with NAVSEA, DON, and DoD cybersecurity policies
• Coordinate cybersecurity processes and activities for assigned systems
• Report changes in system security posture to the ISSM
• Maintain and report Assess Only and Assessment and Authorization status
• Provide oversight of Security Plans for assigned systems
• Manage and maintain Plan of Actions and Milestones
• Coordinate validation of security controls with Navy Qualified Validators
• Register and maintain systems in eMASS
• Maintain vulnerability data in VRAM

Required qualifications

• Must be a U.S. Citizen
• Active Secret security clearance
• Bachelor's degree in computer science, information technology, communications systems management, or equivalent STEM degree from an accredited college or university
• Minimum 6 years of experience coordinating and implementing security changes, ensuring compliance with published policies, conducting cybersecurity vulnerability and threat analysis, and supporting cy
• Current IAM-II certification (CAP, CASP+ CE, CISM, CISSP, GSLC, CCISO, or HCISPP)

Nice to have

• Experience with the DoD Information Assessment and Authorization (A&A) process
• Familiarity with Risk Management Framework (RMF) implementation
• Proficiency with eMASS, VRAM, and other DoD cybersecurity systems
• Experience with NIST Special Publications and DoD/Navy cybersecurity directives
• Experience with vulnerability management tools (ACAS, HBSS, etc.)
• Knowledge of Security Technical Implementation Guides (STIGs) and Security Requirements Guides (SRGs)

About the company

Arlo Solutions (Arlo) is an information technology consulting services company that specializes in delivering technology solutions. Their mission is to understand and meet the needs of both customers and consultants by delivering quality, value-added solutions.