Information System Security Officer

SOSi; Hawaii; On-site; USD 110,000 - 180,000; Full time

Job summary

SOSi is seeking a seasoned Information Systems Security Officer (ISSO) to lead RMF activities at Joint Base Pearl Harbor Hickam, Honolulu. You will oversee security programs for mission-critical IT and support over 5,000 users across the Pacific, delivering executive-level insights and maintaining secure classified operations.

Responsibilities include managing eMASS packages, STIG compliance, ACAS, and coordination with external stakeholders.

Qualifications

• Bachelor's degree in CS, Cybersecurity, IT or related fields.
• Six years of experience in cybersecurity, IA, systems engineering or RMF.
• Thorough understanding of NIST 800-53r5, RMF, EO 14028, and M-22-09.

Responsibilities

• Assist ISSM in maintaining an organized information system security program.
• Secure classified processing systems and manage security audits.
• Develop and supervise security guidelines and policies.
• Manage eMASS packages and security authorizations.
• Coordinate inspections, tests, and reviews of information system security.
• Respond to security incidents and protect assets.
• Understand ACAS to support patch and vulnerability mgmt.
• Ensure STIG reviews and quarterly updates.
• Enforce Configuration Management for hardware/software.
• Engage external stakeholders for interconnection requests.
• Maintain knowledge of system functions, security policies, safeguards.
• Manage ongoing monitoring plan.
• Keep POA&Ms records and report violations.
• Evaluate system changes to environment and operations.

Skills

RMF expertise

DoD protocol knowledge

Strong communication

Security auditing

Team coordination

Education

Bachelor's degree in CS/Cybersecurity/IT or related field

Tools

eMASS

Nessus/SCAP

JIRA & Confluence

Job description

SOSi is looking for a seasoned Information Systems Security Officer (ISSO) ready to lead the charge in securing mission-critical IT operations at Joint Base Pearl Harbor Hickam, Honolulu. As part of a dynamic team supporting over 5,000 users across the Pacific theater, you’ll be at the forefront of solving complex technical challenges that drive real-time Command and Control (C2) strategies.

This isn’t just a job — it’s a mission. You’ll own the full Risk Management Framework (RMF) lifecycle, from identifying vulnerabilities to engineering resilient security controls. If you\'re fluent in DoD protocols, thrive in high-stakes environments, and can deliver executive-level insights with clarity and precision, this is your opportunity to make a strategic impact where it matters most.

• Assist the ISSM (Information System Security Manager) in formulating and upholding an organized information system security program and policies that are applicable to their assigned area of responsibility.
• Establish and maintain secure computer systems and networks for classified processing, and take responsibility for the administration, maintenance, and security auditing of such systems.
• Develop and supervise the implementation of guidelines and policies for operational information systems security.
• Manage assigned eMASS (Enterprise Mission Assurance Support Service) packages containing all security authorizations for information systems under their supervision.
• Coordinate inspections, tests, and reviews of information system security.
• As a key member of the team, you will be responsible for contributing your expertise and skills to help ensure the team\'s success in responding to security incidents and protecting organizational assets.
• Practical understanding of the Assured Compliance Assessment Solution (ACAS) to support the execution of the information system patch and vulnerability management program.
• Thorough understanding of Security Technical Implementation Guidelines (STIG) and ensure they are reviewed, maintained, and updated on a quarterly basis.
• Ensure compliance with Configuration Management policies and procedures for authorizing the use of hardware and software on an information system.
• Engage with external stakeholders to facilitate the coordination of interconnection requests and ensure that such requests are processed and approved in an efficient manner.
• Maintain current knowledge of system functions, security policies, technical security safeguards, and operational security measures.
• Manage, maintain, and execute the information security continuous monitoring plan.
• Keep records of all security-related vulnerabilities POA&Ms and ensure that serious or unresolved violations are reported to the AO/DAO.
• Evaluate any changes to the system, its environment, and operational

Qualifications

• Compliant with DoD 8140 DCWF 722 Intermediate, Information Systems Security Manager. Bachelor\'s Degree in Computer Science, Cybersecurity, Data Science, Information Systems, Information Technology, OR Software Engineering // OR // GMON, SecurityX, CCISO, CCSP, CGRC, CISSO, Cloud+, GCSA, GSEC, Security+, OR SSCP.
• Six (6) years of experience supporting cybersecurity, information assurance, systems engineering, OR RMF-related activities.
• Thorough understanding of NIST Publication 800-53r5, Risk Management Framework, Executive Order 14028, and OMB Mandate M-22-09.
• Prior experience with eMASS.
• Strong communication skills and ability to coordinate tasks across functional groups.

Preferred Qualifications:

• An Active in-scope TOP SECRET clearance with SCI Eligibility.
• Knowledge of NSA’s Commercial Solution for Classified (CSfC) solution and Cross Domain Solutions (CDS).
• Experience in an agile work environment
• Recent experience in the assessment and authorization of systems.
• Practical knowledge of JIRA and Confluence.
• Experience with compliance tools such as Tenable Nessus and SCAP.
• Experience in program policy and process creation and oversight.

Additional Information

• Working conditions are normal for an office environment.
• Fast paced, deadline-oriented environment.
• May require periods of non-traditional working hours including consecutive nights or weekends.

Working at SOSi:

All interested individuals will receive consideration and will not be discriminated against for any reason.