Information Systems Security Officer (ISSO) – Senior Level

Goldbelt, Inc.•Mechanicsburg, OH

About The Position

Please note that this position is contingent upon the successful award of a contract currently under bid. Goldbelt Nighthawk offers sound solutions in software development and both defensive and proactive cybersecurity. Nighthawk offers an integrated, holistic cybersecurity workforce that is enthusiastic, continuously learning, and progressive. The team is fully committed to implementing dynamic cybersecurity solutions that effectively address the needs of customers. Nighthawk’s flexibility and expertise across the cybersecurity field provides customized solutions to our customer's unique needs. Summary: The Information Systems Security Officer (ISSO) – Senior serves as a key cybersecurity practitioner responsible for independently managing RMF processes, ensuring system compliance, and advising stakeholders on cybersecurity risks and mitigation strategies.

Requirements

Strong working knowledge of RMF, NIST controls, and DoD cybersecurity requirements
Experience with eMASS and system authorization processes
Minimum 4-5 years of related experience
Minimum 2 years of experience of the following: Ensuring compliance with DoD-specific, DoN-specific, and NAVSUP-specific RMF services (including RMF package services) and using and complying with the Navy RMF Process Guide version 4.1 (or 4.0 or the latest version) and the NAVSUP FAO RMF Business Rules version 1.0 (or latest version).
Ensuring plans and channels are in place for incident response, business continuity, disaster recovery, and vulnerability and threat reporting and that team members are trained accordingly.
Ensure relevant policy and procedural documentation is current and accessible to properly authorized individuals.
Continuous monitoring to include Annual Security Reviews.
Must have a Tier III Level Clearance

Nice To Haves

Bachelor’s degree in Cybersecurity, Information Technology, or related field

Responsibilities

Execute and oversee RMF activities for assigned systems with minimal supervision
Support and enforce compliance with Navy, DON, and DoD cybersecurity policies and standards
Identify, assess, and document cybersecurity risks, vulnerabilities, and deficiencies, and recommend corrective actions
Validate user access requirements, ensuring proper clearances, training, and authorization
Lead coordination of incident response, business continuity, and disaster recovery planning and validation
Ensure proper implementation of vulnerability management and threat reporting processes
Manage and facilitate RMF coordination using eMASS, including Collaboration Board activities
Review and approve documentation uploaded to the eMASS Artifacts repository
Conduct and lead Annual Security Control Reviews (ASRs) and continuous monitoring activities
Provide mentorship and guidance to junior ISSO personnel