Information Systems Security Officer

SOSi•Pearl City, HI

10h•$97,671 - $131,855•Onsite

About The Position

SOSi is seeking a seasoned Information Systems Security Officer (ISSO) to lead IT security operations at Joint Base Pearl Harbor Hickam, Honolulu. This role involves supporting over 5,000 users and driving real-time Command and Control (C2) strategies. The ISSO will manage the full Risk Management Framework (RMF) lifecycle, including vulnerability identification and security control implementation. The position requires fluency in DoD protocols and the ability to provide executive-level insights.

Requirements

An Active in-scope SECRET clearance.
Compliant with DoD 8140 DCWF 722 Intermediate, Information Systems Security Manager.
Bachelor's Degree in Computer Science, Cybersecurity, Data Science, Information Systems, Information Technology, OR Software Engineering // OR // GMON, SecurityX, CCISO, CCSP, CGRC, CISSO, Cloud+, GCSA, GSEC, Security+, OR SSCP.
Six (6) years of experience supporting cybersecurity, information assurance, systems engineering, OR RMF-related activities.
Thorough understanding of NIST Publication 800-53r5, Risk Management Framework, Executive Order 14028, and OMB Mandate M-22-09.
Prior experience with eMASS.
Strong communication skills and ability to coordinate tasks across functional groups.

Nice To Haves

An Active in-scope TOP SECRET clearance with SCI Eligibility.
Knowledge of NSA’s Commercial Solution for Classified (CSfC) solution and Cross Domain Solutions (CDS).
Experience in an agile work environment
Recent experience in the assessment and authorization of systems.
Practical knowledge of JIRA and Confluence.
Experience with compliance tools such as Tenable Nessus and SCAP.
Experience in program policy and process creation and oversight.

Responsibilities

Assist the ISSM in formulating and upholding an organized information system security program and policies.
Establish and maintain secure computer systems and networks for classified processing, and take responsibility for the administration, maintenance, and security auditing of such systems.
Develop and supervise the implementation of guidelines and policies for operational information systems security.
Manage assigned eMASS packages containing all security authorizations for information systems under their supervision.
Coordinate inspections, tests, and reviews of information system security.
Contribute expertise and skills to ensure the team's success in responding to security incidents and protecting organizational assets.
Support the execution of the information system patch and vulnerability management program using ACAS.
Ensure Security Technical Implementation Guidelines (STIG) are reviewed, maintained, and updated quarterly.
Ensure compliance with Configuration Management policies and procedures for authorizing hardware and software use.
Engage with external stakeholders to coordinate and process interconnection requests.
Maintain current knowledge of system functions, security policies, technical security safeguards, and operational security measures.
Manage, maintain, and execute the information security continuous monitoring plan.
Keep records of all security-related vulnerabilities POA&Ms and report serious or unresolved violations to the AO/DAO.
Evaluate any changes to the system, its environment, and operational procedures.