Information System Security Officer

<p><strong>Join the Cyber Team in Paradise 🌴</strong></p><p><strong>SOSi</strong> is looking for a seasoned <strong>Information Systems Security Officer (ISSO)</strong> ready to lead the charge in securing mission-critical IT operations at <strong>Joint Base Pearl Harbor Hickam, Honolulu</strong>. As part of a dynamic team supporting over 5,000 users across the Pacific theater, you’ll be at the forefront of solving complex technical challenges that drive real-time Command and Control (C2) strategies.</p><p>This isn’t just a job — it’s a mission. You’ll own the full <strong>Risk Management Framework (RMF)</strong> lifecycle, from identifying vulnerabilities to engineering resilient security controls. If you're fluent in DoD protocols, thrive in high-stakes environments, and can deliver executive-level insights with clarity and precision, this is your opportunity to make a strategic impact where it matters most.</p><p><strong>Essential Job Duties:</strong></p><ul><li>Assist the ISSM (Information System Security Manager) in formulating and upholding an organized information system security program and policies that are applicable to their assigned area of responsibility.</li><li>Establish and maintain secure computer systems and networks for classified processing, and take responsibility for the administration, maintenance, and security auditing of such systems.</li><li>Develop and supervise the implementation of guidelines and policies for operational information systems security.</li><li>Manage assigned eMASS (Enterprise Mission Assurance Support Service) packages containing all security authorizations for information systems under their supervision.</li><li>Coordinate inspections, tests, and reviews of information system security.</li><li>As a key member of the team, you will be responsible for contributing your expertise and skills to help ensure the team's success in responding to security incidents and protecting organizational assets.</li><li>Practical understanding of the Assured Compliance Assessment Solution (ACAS) to support the execution of the information system patch and vulnerability management program.</li><li>Thorough understanding of Security Technical Implementation Guidelines (STIG) and ensure they are reviewed, maintained, and updated on a quarterly basis.</li><li>Ensure compliance with Configuration Management policies and procedures for authorizing the use of hardware and software on an information system.</li><li>Engage with external stakeholders to facilitate the coordination of interconnection requests and ensure that such requests are processed and approved in an efficient manner.</li><li>Maintain current knowledge of system functions, security policies, technical security safeguards, and operational security measures.</li><li>Manage, maintain, and execute the information security continuous monitoring plan.</li><li>Keep records of all security-related vulnerabilities POA&amp;Ms and ensure that serious or unresolved violations are reported to the AO/DAO.</li><li>Evaluate any changes to the system, its environment, and operational requirements that could impact security authorization.</li></ul>

<p><strong>Minimum Requirements:</strong></p><ul><li>An Active in-scope SECRET clearance.</li><li>Bachelor’s degree in a related field plus 4 years of related experience.</li><li>DoD 8570 IAT-II compliant (Security+ CE, CCNA, CND, CySA+, GICSP, GSEC, or SSCP).</li><li>Thorough understanding of NIST Publication 800-53r5, Risk Management Framework, Executive Order 14028, and OMB Mandate M-22-09.</li><li>Prior experience with eMASS.</li><li>Strong communication skills and ability to coordinate tasks across functional groups.</li></ul><p><strong>Preferred Qualifications:</strong></p><ul><li>An Active in-scope TOP SECRET clearance with SCI Eligibility.</li><li>Knowledge of NSA’s Commercial Solution for Classified (CSfC) solution and Cross Domain Solutions (CDS).</li><li>Experience in an agile work environment</li><li>Recent experience in the assessment and authorization of systems.</li><li>Practical knowledge of JIRA and Confluence.</li><li>Experience with compliance tools such as Tenable Nessus and SCAP.</li><li>Experience in program policy and process creation and oversight.</li></ul>