Who We Are (video)
JRC is a specialty Systems Engineering and Research company focused on Strategic Deterrence and Strategic Defense of our great nation. We are an award-winning workplace, acknowledged as one of Greater Washington’s Best Places to Work and recognized as a Top Workplace by The Washington Post for 10 consecutive years. Headquartered in Washington, DC with international programs and operations in over 15 states, our expertise in areas such as systems engineering, digital integration, and program management, have supported some of the nation’s most important defense programs.
Join JRC's Maritime and Security Team!
Are you a cyber subject matter expert (SME) excited about building a brand-new cyber program from scratch? We are actively searching for an experienced Information Systems Security Office (ISSO) to work collaboratively with our engineering teams and the US Navy to provide recommendations on best practices and how to best implement cybersecurity policies and programs to create a successful cybersecurity posture.
As an Information Systems Security Office (ISSO) with JRC, you will...
- Evaluate the current cybersecurity landscape and identify gaps and vulnerabilities.
- Spearhead the development and implementation of cybersecurity programs.
- Ensure compliance with cybersecurity policies and procedures.
- Partner with cross-functional teams to ensure effective implementation of the 6 steps (Categorize, Select, Implement, Assess and Authorize, Monitor and Evaluate, Provide Continuous Monitoring)
- Track the ATO package through its lifecycle and update for continued ATO as the system is updated or modified.
- Conduct risk assessments and manage the overall cybersecurity risk posture.
- Provide training and awareness programs for employees.
- Liaise with external stakeholders and regulatory bodies.
What you bring to the table:
- Clearance: An active DoD SECRET Security Clearance (or above)
- Education: Bachelor's degree in computer science, Cybersecurity, or related field (or equivalent experience)
- Certifications: CompTIA Security+, CISSP, CISM or other relevant certifications
- Experience:
- 7+ years of experience developing Risk Management Framework (RMF) packages
- Proven track record of developing effective cybersecurity programs and strategies using NIST guidelines
- Experience with security control implementation, assessment, and authorization
- Strong understanding of cybersecurity principles, including confidentiality, integrity, and availability
- Ability to convey complex information clearly, concisely, and accurately in both technical and non-technical contexts
Bonus Points for...
- Experience working in a fast-paced, dynamic environment
- Knowledge of DoD, Navy, or federal regulations and guidelines related to RMF and cybersecurity