Information System Security Officer

SUMARIA SYSTEMS LLC•Biloxi, MS

1d•$68,000 - $72,000•Onsite

About The Position

The Information System Security Officer (ISSO) supports cybersecurity operations and Risk Management Framework (RMF) activities for a DHA‑aligned medical environment. The ISSO ensures compliance with DoD, DHA, and Air Force cybersecurity requirements while maintaining secure operation of clinical and administrative systems.

Requirements

Experience with DoD/DHA cybersecurity operations and RMF processes.
Proficiency with ACAS, eMASS, CHRIP, Splunk, and Microsoft Defender.
Knowledge of STIGs, IAVMs, and vulnerability management processes.
DoD 8570/8140 baseline certification (Security+, CySA+, CASP, CISSP, etc.).

Responsibilities

Implement and enforce DoD, DHA, and AF cybersecurity policies and IA practices.
Manage RMF activities, including preparing and maintaining ATO packages in eMASS.
Perform continuous monitoring operations, including vulnerability scanning, POA&M updates, and control assessments.
Review and remediate ACAS findings, STIG non-compliance, IAVM notices, and other security incidents.
Oversee cyber training compliance and maintain user security awareness programs.
Maintain hardware/software inventories and support configuration management activities.
Process access requests, manage Alternate Tokens, and ensure compliance with user agreements and Consent-to-Monitor requirements.
Collaborate with DHA Enterprise, vendors, and system administrators on risk assessments and system integrations.
Submit required cybersecurity reporting and upload monthly scan results.
Support inspections, penetration tests, CHRIP evaluations, and risk acceptance workflows.