Information System Security Officer

Bering-Alaka'ina Holdings, LLC; Hawaii; On-site; USD 126,000 - 154,000; Full time

Benefits offered by this job

401K plan with company match

medical, dental, disability, and life

tuition reimbursement

paid time off

11 paid holidays

Job summary

Bering-Alaka’ina Holdings, LLC seeks an experienced Information System Security Officer (ISSO) to strengthen the cybersecurity posture for mission-critical government systems on Oahu, Hawai'i. You will lead RMF activities, ensure NIST guidelines are followed, and support authorization lifecycles.

The role requires TS/SCI clearance, DoD 8140/8570 proficiency, hands-on A&A, vulnerability management, and collaboration with ISSMs, system owners, and AO.

Qualifications

• Bachelor's degree in a related field and DoD 8140/8570.01-M IAM certifications.
• 4+ years of A&A experience to achieve ATO, ATC, and cross-domain validations.
• Experience with NIST SP 800-37/53 Rev 5, CNSSI, eMASS/Xacta administration.

Responsibilities

• Oversee RMF lifecycle steps 1–6 with thorough documentation.
• Validate NIST SP 800-53 controls and remediation strategies.
• Review ACAS/Nessus scans, verify mitigations, and track POA&M items.
• Maintain SSPs, Contingency/Incident/Continuous Monitoring/Config Plans.
• Participate in CCBs and assist in security investigations.

Skills

A&A Workflows

NIST SP 800-53

RMF Lifecycle

ATC / cross-domain

Vulnerability scanning

eMASS / Xacta

SIEM (Splunk)

SIEM (Elastic)

Archer / Jira

AO / risk metrics

Education

Bachelor's Degree in Cybersecurity / Information Systems / Computer Science

Tools

eMASS

Xacta

Archer

Jira

Job description

Bering-Alaka’ina Associates LLC is looking for an experienced and detail-oriented Information System Security Officer (ISSO) to enhance the cybersecurity posture, assessment, and authorization lifecycle for mission-critical information systems to provide support for our government customer in Oahu, Hawai'i.

Working in close collaboration with Information System Security Managers (ISSMs), system owners, and authorizing officials, the ISSO ensures enterprise platforms maintain continuous compliance with National Institute of Standards and Technology (NIST) guidelines, Risk Management Framework (RMF) mandates, and federal security requirements.

DESCRIPTION OF RESPONSIBILITIES:

• Oversee the end-to-end Risk Management Framework (RMF) lifecycle (Steps 1 through 6), ensuring system artifacts and security controls are thoroughly documented and up to date in eMASS or Xacta.
• Validate implementation of NIST SP 800-53 security controls, identify control deficiencies, and formulate achievable remediation strategies.
• Review and analyze automated vulnerability and compliance scans (ACAS/Nessus, SCAP, STIG viewer), correlating findings and verifying mitigation efficacy.
• Develop, track, and maintain comprehensive Plan of Action and Milestones (POA&M) entries to ensure rapid closure of system vulnerabilities and audit findings.
• Author, update, and maintain System Security Plans (SSP), Contingency Plans, Incident Response Plans, Continuous Monitoring Plans, and Configuration Management Plans.
• Participate in Change Control Boards (CCB) to evaluate security impacts of proposed architectural, software, and hardware modifications.
• Assist with cybersecurity event investigations, incident triage, and continuous audit log reviews to ensure integrity across system environments.
• Other duties as assigned by Supervisor.

REQUIRED DEGREE/EDUCATION/CERTIFICATION:

• Bachelor's Degree - Accredited B.S. in Cybersecurity, Information Systems, Computer Science, or related field
• DoD 8140 / 8570.01-M IAM Level II or III = CompTIA Security+, Cloud+, CAP, Security X/CASP+, CCISO, CCSP, CISSO, GCSA, GSEC, SSCP, CISM, CISSP, CISSP-ISSMP, FITSP-M, GCIA, GCIH, GICSP, GSLC.
• Federal / DoD Frameworks - Demonstrated coursework or training in NIST SP 800-37, NIST SP 800-53 Rev 5, CNSSI 1253, and eMASS / Xacta administration.

REQUIRED SKILLS AND EXPERIENCE:

• Four plus (4+) years of direct experience executing Assessment & Authorization (A&A) workflows to achieve Authority to Operate (ATO). Experience supporting Authorization to Connect (ATC) and cross-domain solution validations.
• Hands-on experience interpreting DISA STIGs, Security Content Automation Protocol (SCAP), and ACAS vulnerability scans. Experience validating host-level security baselines across Linux, Windows Server, and cloud enclaves (AWS / Azure GovCloud).
• Direct proficiency using governance tools such as eMASS, Xacta, Archer, or Jira for tracking compliance workflows. Experience establishing continuous monitoring strategies using SIEM tools such as Splunk or Elastic Security.
• Demonstrated ability to present complex risk metrics and technical deficiencies to executive leadership and Authorizing Officials (AO). Familiarity with Supply Chain Risk Management (SCRM) and DevSecOps continuous ATO paradigms.

On-site work within a secure facility (SCIF) with occasional travel for site compliance audits.

REQUIRED CITIZENSHIP AND CLEARANCE:

• Must be a U.S. Citizen
• Active Top Secret clearance with immediate eligibility for Sensitive Compartmented Information (TS/SCI).

COMPENSATION DETAILS:

• $140,000.00
• The compensation range or hourly rate provided is a good faith estimate at the time of posting. Final compensation will be determined based on qualifications, experience, skills, internal equity, market conditions, and applicable laws.

Bering-Alaka`ina Holdings, LLC is a fast-growing government service provider. Employees enjoy competitive salaries.

• 401K plan with company match
• medical, dental, disability, and life insurance coverage
• tuition reimbursement
• paid time off
• 11 paid holidays

We are an Equal Opportunity/Affirmative Action Employer of individuals with disabilities and veterans. We not illegally discriminate in employment decisions on the basis of any protected categories. If you are a person with a disability and you need an accommodation during the application process, please click here to request accommodation. We E-Verify all employees.

As a part of BSNC, Bering- Alakaina Holdings gives hiring, promotion, training, and retention preference to BSNC shareholders, descendants and shareholder spouses who meet the minimum qualifications for the job. Qualified job candidates will generally be considered in the following order: BSNC shareholders, descendants, shareholder spouses, current employees, and outside candidates. The BSNC Shareholder Development department tracks and monitors the implementation of the Shareholder Hire Preference across its operations.

Bering-Alaka`ina Holdings, LLC is comprised of industry-recognized government service firms designated as Alaska Native Corporation (ACN)-owned and 8(a) certified businesses and includes Ke`aki Technologies, LLC; Laulima Government Solutions, LLC; Kūpono Government Services, LLC; Kapili Services, LLC; Po`okela Solutions, LLC; Kīkaha Solutions, LLC;and Pololei Solutions, LLC.

For additional information, please visit www.beringalakaina.com

#LI-JS1

#ClearanceJobs