Senior Information Systems Security Officer (ISSO)

Saalex•Camarillo, CA

2d•Onsite

About The Position

Saalex is seeking a Senior Information Systems Security Officer (ISSO) in Camarillo/Naval Air Station Point Mugu, CA to support cybersecurity, Risk Management Framework (RMF), and Certification & Accreditation (C&A) activities. The selected candidate will serve as a key cybersecurity resource responsible for supporting system authorization efforts, maintaining security compliance, implementing information assurance policies, and ensuring systems maintain Authority to Operate (ATO) status. This position requires a strong understanding of RMF, cybersecurity compliance, system accreditation, and DoD information assurance requirements.

Requirements

Minimum of 10 years of relevant cybersecurity, information assurance, RMF, or Certification & Accreditation experience.
Must hold one of the following certifications: CISSP, CASP+, CompTIA Security+, CEH, or equivalent DoD 8140/8570-compliant Information Assurance certification.
Strong knowledge of the NIST Risk Management Framework (RMF) and system authorization lifecycle.
Experience implementing, assessing, and maintaining security controls in accordance with federal and DoD requirements.
Working knowledge of security control baselines, system security documentation, and continuous monitoring requirements.
Experience supporting Authority to Operate (ATO) efforts and system accreditation activities.
Knowledge of information systems technologies, including networks, operating systems, processing platforms, and enterprise environments.
Experience supporting Windows, UNIX/Linux, and other operating system environments.
Active Top Secret clearance required with the ability to obtain Special Access Program (SAP) access.
Requirements to obtain a clearance include US Citizenship, security investigation, etc.

Nice To Haves

Experience developing RMF accreditation packages and authorization documentation.
Experience supporting Navy, NAVAIR, or other DoD cybersecurity programs.
Experience serving as an ISSO, ISSM, Information Assurance Manager (IAM), or Information Assurance Officer (IAO).
Experience supporting cybersecurity inspections, audits, and security assessments.
Familiarity with eMASS and DoD cybersecurity compliance tools.
Experience developing cybersecurity policies, procedures, and training materials.
Additional technical education or cybersecurity-related coursework preferred.

Responsibilities

Serve as the Sr. Information Systems Security Officer (ISSO) supporting Certification & Accreditation (C&A) activities for multiple systems and programs.
Prepare, maintain, submit, and update RMF and accreditation documentation required to achieve and maintain system authorization.
Support Authority to Operate (ATO) efforts and continuous monitoring activities throughout the system lifecycle.
Ensure implementation of security policies, procedures, and controls established by the Information Systems Security Manager (ISSM).
Maintain knowledge of current information assurance, cybersecurity, and RMF requirements, policies, directives, and emerging technologies.
Assess information systems and operating environments to ensure compliance with applicable security requirements.
Support security control implementation, assessment, remediation, and documentation activities.
Assist with the development and maintenance of system security documentation, policies, procedures, and compliance artifacts.
Conduct management studies and evaluations focused on cybersecurity compliance and procedural effectiveness.
Develop division-level policies and procedures to ensure compliance with DoD and organizational cybersecurity requirements.
Coordinate required cybersecurity activities, milestones, reviews, and compliance efforts to ensure timely execution.
Provide cybersecurity guidance and recommendations to technical staff, management, and government stakeholders.
Deliver security awareness and cybersecurity-related training to assigned personnel.
Review technical documentation, contracts, reports, and program deliverables for security and compliance requirements.
Support configuration management processes and ensure documentation complies with applicable organizational standards.
Perform technical research and complex information gathering activities in support of cybersecurity initiatives.
Attend conferences, training sessions, and professional development activities to maintain technical proficiency.
Other duties as assigned or required.