Cybersecurity Specialist II/ Information System Security Officer (ISSO)

Summary The Cybersecurity Specialist II/ISSO supports the implementation and sustainment of Risk Management Framework (RMF) controls for PMW 790 STACC systems, ensuring compliance with DoD, Navy, and NAVWAR cybersecurity policies throughout the system lifecycle. This role maintains security documentation, monitors vulnerabilities, and collaborates with engineering, testing, and operations teams to preserve an authorized and resilient cybersecurity posture across multiple enclaves. Location: San Diego, CA | Norfolk, VA | Charleston, SC | Pearl Harbor, HI | Panama City, FL Clearance: Secret (eligible for TS/SCI) Responsibilities Implement, assess, and maintain RMF security controls, ensuring compliance with DoD 8510.01, NIST SP 800-53, and NAVWAR cybersecurity guidance. Develop, update, and maintain security accreditation documentation, including System Security Plans (SSPs), Plan of Action and Milestones (POA&Ms), and Security Assessment Reports (SARs). Monitor system vulnerabilities and mitigation actions through continuous monitoring activities, periodic reviews, and control assessments using VRAM, ACAS, and STIG checklists. Support coordination and submission of ATO/ATC packages in eMASS, ensuring completeness and traceability. Review system configurations and changes for security impact and maintain alignment with configuration management. Assist in security-incident detection, analysis, and response in collaboration with the Cyber Operations team. Conduct risk assessments and provide remediation or system-hardening recommendations. Participate in cybersecurity working groups, audits, and inspections. Provide cybersecurity awareness and compliance guidance to system administrators, developers, and other users. Qualifications Bachelor's degree in Cybersecurity, Computer Science, Information Systems, or related field (or equivalent experience). Experience supporting ATO sustainment and vulnerability-management processes within Navy or DoD enterprise networks is preferred RMF, eMASS, STIG, and ACAS experience. Security+ CE or higher (IAT II). 5 + years of DoD cyber-compliance experience. Ability to work both independently and as part of a cross-functional team; ready for occasional travel or onsite support as required. Proven problem‑solving abilities with strong analytical and troubleshooting skills. Excellent communication skills: able to explain technical issues to technical and non-technical stakeholders. #J-18808-Ljbffr Information Management Resources, Inc.