(603) Information System Security Officer (ISSO) III

<div class="content-intro"><p><strong>Company Summary</strong></p> <p>Arlo Solutions (Arlo) is an information technology consulting services company that specializes in delivering technology solutions. Our reputation reflects the high quality of the talented Arlo Solutions team and the consultants working in partnership with our customers. Our mission is to understand and meet the needs of both our customers and consultants by delivering quality, value-added solutions. Our solutions are designed and managed to not only reduce costs, but to improve business processes, accelerate response time, improve services to end-users, and give our customers a competitive edge, now and into the future. </p></div><p><strong>Position Description: </strong>The <strong>Information System Security Officer (ISSO) III</strong> will support Naval Surface Warfare Center Philadelphia Division (NSWCPD) as a contractor through Arlo Solutions, serving as a key cybersecurity professional for NSWCPD Code 104. This key personnel position is responsible for coordinating cybersecurity processes and activities for assigned systems, ensuring compliance with all applicable policies, and managing security controls implementation throughout the Risk Management Framework (RMF) lifecycle.</p> <p><strong><br>Location: </strong> Philadelphia, PA</p> <p><strong>Clearance: </strong> Active Secret</p> <p><strong><br>Responsibilities and/or Success Factors: </strong></p> <p><span style="text-decoration: underline;">Cybersecurity Compliance and Policy Implementation</span></p> <ul> <li> Assist the Information System Security Managers (ISSM) in executing their duties and responsibilities</li> <li>Ensure compliance with all NAVSEA, DON, and DoD cybersecurity policies </li> <li>Ensure relevant cybersecurity policy and procedural documentation is current and accessible </li> <li>Coordinate cybersecurity processes and activities for assigned systems </li> <li>Report changes in system security posture to the ISSM Security Assessment and Authorization (A&A) Management </li> <li>Maintain and report Assess Only (AO) and Assessment and Authorization (A&A) status to Program Managers, Information System Owners, and ISSMs</li> <li>Provide oversight of Security Plans for assigned systems throughout their lifecycle </li> <li>Manage and maintain Plan of Actions and Milestones (POA&M), tracking vulnerabilities through remediation </li> <li>Assist with identification of security control baselines and applicable overlays </li> <li>Coordinate the validation of security controls with Navy Qualified Validators (NQV) </li> <li>Perform Risk Management Framework (RMF) Standard Operating Procedure (SOP) reviews </li> <li>Adjudicate findings from Package Submitting Officer (PSO) System Security Management</li> <li>Register and maintain systems in Enterprise Mission Assurance Support Service (eMASS) </li> <li>Plan and coordinate security control testing during Risk Assessments and Annual Security Reviews </li> <li>Maintain vulnerability data in Vulnerability Remediation Asset Manager (VRAM) </li> <li>Participate in change control and configuration management processes </li> <li>Ensure execution of Continuous Monitoring requirements as defined in system strategies </li> <li>Review all data produced by Continuous Monitoring activities and update eMASS records as necessary </li> <li>Correlate findings from non-RMF vulnerability assessments to RMF controls for holistic risk assess