Information Systems Security Manager

SOSi; Honolulu (HI); On-site; USD 110,290 - 148,891; Full time

Job summary

SOSI is seeking an Information Systems Security Manager to lead DoD cybersecurity at Joint Base Pearl Harbor Hickam in Honolulu. You will architect and maintain security programs, coordinate with customers and stakeholders, and ensure compliance with RMF, STIGs, and ACAS.

Strong DoD security background, top‑secret eligibility preferred, and hands‑on experience with eMASS and security authorizations are required to protect critical national infrastructure.

Qualifications

• DoD 8570 IAM-III compliant certification or equivalent experience.
• Strong knowledge of NIST, RMF, and federal cyber guidance.
• Experience with eMASS and security authorization processes.
• Ability to coordinate across multiple teams and stakeholders.

Responsibilities

• Lead information system security program design and policy development.
• Maintain secure systems for classified processing and audit security.
• Develop and supervise security guidelines for OPS information systems.
• Manage eMASS packages and security authorizations.
• Coordinate security inspections, tests, and reviews.
• Contribute expertise to incident response and asset protection.
• Support ACAS patching and vulnerability management programs.
• Ensure STIG guidelines are reviewed and updated quarterly.
• Oversee hardware/software authorization configurations.
• Engage with external stakeholders for interconnection requests.
• Keep current on system functions, policies, safeguards, and OT measures.
• Maintain continuous monitoring plan and records of POA&Ms.

Skills

IAM-III Compliance

CISSP/CISM/CCISO

CSfC/CDS knowledge

Security governance & policy

Education

Bachelor’s degree in a related field

Tools

JIRA

Confluence

Tenable Nessus

SCAP

eMASS

Job description

Job Description

Join SOSi at the Forefront of Cyber Defense! SOSi is on the hunt for a seasoned Information Systems Security Manager to lead cutting-edge security initiatives at Joint Base Pearl Harbor Hickam in Honolulu. In this pivotal role, you’ll architect and maintain robust cybersecurity frameworks that safeguard DoD networks and systems. Collaborate with a dynamic mix of customers, partners, and stakeholders to implement mission‑critical security protocols that keep our nation’s digital infrastructure secure.

Ready to make an impact where it matters most? Let’s build the future of defense technology—securely.

Responsibilities

• Assist the Cyber Security Compliance Team Lead in formulating and upholding an organized information system security program and policies that are applicable to their assigned area of responsibility.
• Establish and maintain secure computer systems and networks for classified processing, and take responsibility for the administration, maintenance, and security auditing of such systems.
• Develop and supervise the implementation of guidelines and policies for operational information systems security.
• Manage assigned eMASS (Enterprise Mission Assurance Support Service) packages containing all security authorizations for information systems under their supervision.
• Coordinate inspections, tests, and reviews of information system security.
• As a key member of the team, you will be responsible for contributing your expertise and skills to help ensure the team's success in responding to security incidents and protecting organizational assets.
• Practical understanding of the Assured Compliance Assessment Solution (ACAS) to support the execution of the information system patch and vulnerability management program.
• Thorough understanding of Security Technical Implementation Guidelines (STIG) and ensure they are reviewed, maintained, and updated on a quarterly basis.
• Ensure compliance with Configuration Management policies and procedures for authorizing the use of hardware and software on an information system.
• Engage with external stakeholders to facilitate the coordination of interconnection requests and ensure that such requests are processed and approved in an efficient manner.
• Maintain current knowledge of system functions, security policies, technical security safeguards, and operational security measures.
• Manage, maintain, and execute the information security continuous monitoring plan.
• Keep records of all security‑related vulnerabilities POA&Ms and ensure that serious or unresolved violations are reported to the AO/DAO.
• Evaluate any changes to the system, its environment, and operational requirements that could impact security authorization.

Qualifications

• Bachelor’s degree in a related field plus 4 years of related experience.
• DoD 8570 IAM‑III compliant (CCISO, CISM, CISSP (or Associate), or GSLC).
• Knowledge of NSA’s Commercial Solution for Classified (CSfC) solution and Cross Domain Solutions (CDS).
• Thorough understanding of NIST Publication 800‑53r5, Risk Management Framework, Executive Order 14028, and OMB Mandate M‑22‑09.
• Prior experience with eMASS.
• Strong communication skills and ability to coordinate tasks across functional groups.

Preferred Qualifications

• An Active in‑scope TOP SECRET clearance with SCI Eligibility.
• Recent experience in the assessment and authorization of systems.
• Practical knowledge of JIRA and Confluence.
• Experience with compliance tools such as Tenable Nessus and SCAP.
• Experience in program policy and process creation and oversight.

Additional Information

• Working conditions are normal for an office environment.
• Fast paced, deadline‑oriented environment.
• May require periods of non‑traditional working hours including consecutive nights or weekends.
• Target Salary Range: $110,290 to $148,891.

Working at SOSi

All interested individuals will receive consideration and will not be discriminated against for any reason.