ATO ISSO Manager

SAIC; Pearl City (HI); On-site; USD 120,000 - 160,000; Full time

Job summary

SAIC seeks an ATO ISSO Manager in Pearl City, Hawaii to lead a small cybersecurity team, drive RMF/ATO processes, and prepare accreditation packages. You will supervise staff, collaborate with system owners and engineers, and ensure RMF documentation meets NIST SP 800-53A guidance.

You will review security controls, coordinate with government and contractor leadership, and mentor junior personnel while maintaining on-site operations in the USPACOM footprint.

Qualifications

• Bachelor’s degree plus nine+ years of related experience; four years can substitute for degree.
• Experience leading RMF/ATO efforts across cross-functional teams.
• Ability to influence security decisions and drive remediation.
• Experience with ATO packages for on-premises and cloud environments.
• Proficiency with RMF, NIST guides, SRG, and STIGs.

Responsibilities

• Lead a small cybersecurity/ISSO team to complete RMF activities and ATO milestones.
• Mentor staff, provide performance feedback, and oversee day-to-day work.
• Document security controls in SSP per NIST SP 800-53A rev4.
• Create ATO packages and validate risk assessments for accreditation.
• Review system changes and advise on security in hardware/software designs.

Skills

RMF/ATO leadership

GRC tools (CSAM, eMASS, XACTA)

SSP documentation

NIST RMF guidance

Team supervision

Policy and procedure development

Education

Bachelor's degree + 9+ years

Tools

CSAM

eMASS

XACTA

Job description

Minimum Clearance Required Secret

Job ID 2618641

Location Pearl City, HI, US

Date Posted 2026-10-30

Category Cyber

Subcategory Cybersecurity Spec

Schedule Full-Time

Shift Day Job

Travel No

Clearance Level Must Be Able to Obtain TS/SCI

Potential for Remote Work ORA_ON_SITE

Description

SAIC is seeking an ATO ISSO Manager in Pearl City, Hawaii to support USPACOM to lead a small cybersecurity team to ensure military computer systems are secure and formally approved to operate. You will supervise staff, work with system owners and engineers, and prepare the required security documentation and approvals.

Job Description

• Lead coordination with stakeholders (system owners, engineers, and mission partners), serving as the direct supervisor and technical lead for a small cybersecurity/ISSO team, to ensure timely completion of RMF activities and ATO milestones.
• Provide mentorship, performance feedback, and day-to-day oversight to junior cybersecurity/ISSO staff, acting as the direct supervisor and team lead.
• Documenting security controls in SSP per NIST SP 800-53A rev4.
• Create Authority to Operate (ATO) packages.
• Validate vulnerability/risk assessment analysis to support accreditation.
• Utilize various information system inspection tools to audit systems, analyze potential vulnerabilities and identify mitigation approaches.
• Conduct technical evaluation of information system designs, focusing on information security aspects and accreditation.
• Review completion and implementation of system additions and enhancements and makes recommendations to management.
• Determine system specifications, input/output processes, and working parameters for hardware and software compatibility.
• Assist and review program documentation to include RMF reports, accreditation packages, and security policy guides using NIST 800-53A guidance.

Qualifications

REQUIRED EDUCATION AND EXPERIENCE

• Bachelors and nine (9)+ years of related experience; additional four (4) years of experience accepted in lieu of degree
• Experience leading or coordinating RMF/ATO efforts across cross-functional teams, including serving as team lead for ISSO/ISSE or engineering staff and providing status reporting to government and contractor leadership.
• Proven ability to influence security decisions, prioritize remediation efforts, and drive closure of POA&Ms and other risk mitigation actions.
• Experience working with Authority to Operate (ATO) packages for both on-premises, and Cloud environments.
• Experience using Government and Risk Compliance (GRC) tools (i.e. Cyber Security Assessment and Management (CSAM), eMASS, XACTA, etc.).
• Experience developing Standard Operating Procedures (SOP), After-Action Reports, and Policy and Procedure documents.
• Experience documenting security controls in a System Security Plan (SSP) and how the controls are being implemented.
• Familiar with Risk Management Framework (RMF), Cloud Security Requirements Guide (SRG), National Institute of Standards and Technology (NIST) guides, and Security Technical Implementation Guide (STIG).
• Understanding of the DOD requirements for the Network Topology, System Security Boundary, and Data Flow Diagrams.

Required Certification

• Must have a current DoD IAM Level I or higher certification (i.e. Security+ CE, Cloud+, CASP+, OR CISSP etc.)

Required Clearance

• Must have an active Secret clearance with ability to obtain a TS/SCI clearance.
• Must be a current US Citizen.

Target salary range $120,001 - $160,000. The estimate displayed represents the typical salary range for this position based on experience and other factors.