Information System Security Officer

SOSi•Pearl City, HI

23h•$97,671 - $131,855•Onsite

About The Position

SOSi is seeking an experienced Information Systems Security Officer (ISSO) to join their Cyber Team at Joint Base Pearl Harbor Hickam, Honolulu. This role involves leading the security of mission-critical IT operations for over 5,000 users in the Pacific theater, focusing on solving complex technical challenges for real-time Command and Control (C2) strategies. The ISSO will manage the full Risk Management Framework (RMF) lifecycle, including vulnerability identification, security control engineering, and providing executive-level insights. This is a mission-oriented role with a focus on strategic impact.

Requirements

An Active in-scope SECRET clearance.
Bachelor’s degree in a related field plus 4 years of related experience.
DoD 8570 IAT-II compliant (Security+ CE, CCNA, CND, CySA+, GICSP, GSEC, or SSCP).
Thorough understanding of NIST Publication 800-53r5, Risk Management Framework, Executive Order 14028, and OMB Mandate M-22-09.
Prior experience with eMASS.
Strong communication skills and ability to coordinate tasks across functional groups.

Nice To Haves

An Active in-scope TOP SECRET clearance with SCI Eligibility.
Knowledge of NSA’s Commercial Solution for Classified (CSfC) solution and Cross Domain Solutions (CDS).
Experience in an agile work environment.
Recent experience in the assessment and authorization of systems.
Practical knowledge of JIRA and Confluence.
Experience with compliance tools such as Tenable Nessus and SCAP.
Experience in program policy and process creation and oversight.

Responsibilities

Assist the ISSM in formulating and upholding an organized information system security program and policies.
Establish and maintain secure computer systems and networks for classified processing, including administration, maintenance, and security auditing.
Develop and supervise the implementation of guidelines and policies for operational information systems security.
Manage assigned eMASS packages containing all security authorizations for information systems.
Coordinate inspections, tests, and reviews of information system security.
Contribute expertise to ensure the team's success in responding to security incidents and protecting organizational assets.
Utilize Assured Compliance Assessment Solution (ACAS) for patch and vulnerability management.
Ensure compliance with Security Technical Implementation Guidelines (STIG) and maintain/update them quarterly.
Ensure compliance with Configuration Management policies and procedures for hardware and software authorization.
Engage with external stakeholders to coordinate and process interconnection requests.
Maintain current knowledge of system functions, security policies, technical security safeguards, and operational security measures.
Manage, maintain, and execute the information security continuous monitoring plan.
Keep records of security-related vulnerabilities POA&Ms and report serious violations to the AO/DAO.
Evaluate system changes that could impact security authorization.