Information System Security Officer
About The Position
SOSi is seeking a seasoned Information Systems Security Officer to secure mission-critical IT operations at Joint Base Pearl Harbor Hickam in Honolulu. The role supports more than 5,000 users across the Pacific theater and contributes to real-time Command and Control strategies. The ISSO owns the Risk Management Framework lifecycle, including vulnerability identification and security control engineering, and provides clear executive-level insights in support of the mission. The position assists the Information System Security Manager in maintaining the security program and policies for its assigned area. It establishes and maintains secure systems and networks for classified processing, manages security authorization documentation, coordinates security reviews, supports incident response, and oversees continuous monitoring and vulnerability management. The role also works with external stakeholders on system interconnection requests and evaluates system changes that could affect security authorization.
Requirements
- Active in-scope SECRET clearance.
- Compliant with DoD 8140 DCWF 722 Intermediate, Information Systems Security Manager.
- A bachelor's degree in Computer Science, Cybersecurity, Data Science, Information Systems, Information Technology, or Software Engineering, or one of the listed certifications: GMON, SecurityX, CCISO, CCSP, CGRC, CISSO, Cloud+, GCSA, GSEC, Security+, or SSCP.
- Six years of experience supporting cybersecurity, information assurance, systems engineering, or RMF-related activities.
- Thorough understanding of NIST Publication 800-53r5, the Risk Management Framework, Executive Order 14028, and OMB Mandate M-22-09.
- Prior experience with eMASS.
- Strong communication skills and ability to coordinate tasks across functional groups.
Nice To Haves
- Active in-scope TOP SECRET clearance with SCI Eligibility.
- Knowledge of NSA's Commercial Solution for Classified (CSfC) solution and Cross Domain Solutions (CDS).
- Experience in an agile work environment.
- Recent experience assessing and authorizing systems.
- Practical knowledge of JIRA and Confluence.
- Experience with compliance tools such as Tenable Nessus and SCAP.
- Experience in program policy and process creation and oversight.
Responsibilities
- Assist the ISSM in formulating and maintaining an organized information system security program and applicable policies for the assigned area.
- Establish and maintain secure computer systems and networks for classified processing, including administration, maintenance, and security auditing.
- Develop and supervise implementation of operational information systems security guidelines and policies.
- Manage assigned eMASS packages containing security authorizations for supervised information systems.
- Coordinate inspections, tests, and reviews of information system security.
- Contribute expertise to the team's response to security incidents and protection of organizational assets.
- Support the information system patch and vulnerability management program using ACAS.
- Review, maintain, and update STIGs quarterly.
- Ensure compliance with configuration management policies and procedures for authorizing hardware and software use on information systems.
- Coordinate interconnection requests with external stakeholders and help ensure efficient processing and approval.
- Maintain current knowledge of system functions, security policies, technical safeguards, and operational security measures.
- Manage, maintain, and execute the information security continuous monitoring plan.
- Maintain records of security-related vulnerabilities and POA&Ms, and report serious or unresolved violations to the AO/DAO.
- Evaluate system, environment, and operational requirement changes that could affect security authorization.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Mid Level
