Information Systems Security Officer

Seneca Holdings; Oregon; Hybrid; USD 110,000 - 150,000; Full time

Job summary

Seneca Holdings is seeking an Information System Security Officer (ISSO) to support a Department of War agency. The role focuses on RMF, risk management, and continuous monitoring to ensure authorization and compliance across DSCA systems.

The position requires DoD policy knowledge, experience with security assessments, and the ability to coordinate with system owners and engineers. Onsite work with eventual hybrid arrangements and CONUS travel are involved.

Qualifications

• Experience supporting RMF, cybersecurity compliance, information assurance, or system security activities.
• Knowledge of DoD cybersecurity policies and security authorization requirements.
• Experience with system accreditation/authorization activities and RMF lifecycle processes.
• Experience in access control management, identity management, and periodic user access reviews.
• Ability to evaluate vulnerabilities and report security findings affecting DoD information systems.

Responsibilities

• Support system categorization and cybersecurity risk assessments per DoW and federal guidance.
• Assist with RMF lifecycle implementation and monitoring activities.
• Support security authorization activities and maintain authorization documentation.
• Ensure compliance with DoD cybersecurity policies and security controls.
• Manage continuous monitoring dashboards and security reporting tools.

Skills

RMF

Security Authorization

Vulnerability Remediation

RBAC

Access Management

DoD Policies

Communication Skills

Team Collaboration

Education

Bachelor's degree in Cybersecurity or related field

9+ years of relevant cybersecurity experience in lieu of degree

Job description

Seneca Technologies is part of the Seneca Nation Group (SNG) portfolio of companies. SNG is Seneca Holdings' federal government contracting business that meets mission-critical needs of federal civilian, defense, and intelligence community customers. Our portfolio comprises multiple subsidiaries that participate in the Small Business Administration 8(a) program. To learn more about SNG, visit the website and follow us on LinkedIn.

Our team of talented individuals is what makes us successful. To support our team, we provide a balanced mix of benefits and programs. Your total rewards package includes competitive pay, benefits, and perks, flexible work-life balance, professional development opportunities, and performance and recognition programs. We offer a comprehensive benefits package that includes medical, dental, vision, life, and disability, voluntary benefit programs (critical illness, hospital, and accident), health savings and flexible spending accounts, and retirement 401K plan. One of our fundamental principles is to offer competitive health and welfare benefits to our team members, providing coverage and care for you and your family. Full-time employees working at least 30 hours a week on a regular basis are eligible to participate in our benefits and paid leave programs. We pride ourselves on our collaborative work environment and culture, which embraces our mission of providing financial and non-financial benefits back to the members of the Seneca Nation.

The Information System Security Officer (ISSO) supports a Department of War (DOW) agency in the contractor environment for cybersecurity and risk management program by ensuring information systems comply with DOW cybersecurity requirements and authorization standards. The ISSO is responsible for supporting Risk Management Framework (RMF) activities, system security authorization efforts, continuous monitoring, access control management, and risk assessments. This position works closely with system owners, cybersecurity teams, and mission stakeholders to maintain the security posture of DSCA systems and ensure compliance with applicable federal and DOW policies.

Key Responsibilities

• Support system categorization efforts and conduct cybersecurity risk assessments in accordance with applicable DoW and federal guidance.
• Assist with implementation and execution of the Risk Management Framework (RMF) lifecycle for assigned systems.
• Support system accreditation and security authorization activities, including preparation and maintenance of authorization documentation.
• Ensure compliance with DOW cybersecurity policies, standards, and security controls.
• Monitor information systems and support continuous monitoring activities to identify and address security risks.
• Evaluate continuous monitoring dashboards and security reporting tools to assess system security posture.
• Manage user provisioning, deprovisioning, and periodic access reviews to ensure compliance with least-privilege and access control requirements.
• Track, assess, and coordinate remediation of identified security vulnerabilities and compliance deficiencies.
• Collaborate with system owners, engineers, cybersecurity personnel, and Authorizing Officials to support secure system operations.
• Support security assessments, audits, inspections, and cybersecurity compliance reviews.
• Maintain security documentation, plans, and artifacts required for authorization and continuous monitoring activities.
• Develop reports, metrics, and status updates related to cybersecurity compliance and risk management activities.

Required Qualifications

• Demonstrated experience supporting cybersecurity compliance, system security, and Risk Management Framework (RMF) processes.
• Strong understanding of DOW cybersecurity policies, standards, and security authorization requirements.
• Experience supporting system accreditation and authorization activities within DOW environments.
• Knowledge of access control management, identity management, and account review processes.
• Experience evaluating and reporting security vulnerabilities affecting DOW information systems and networks.
• Strong analytical, organizational, and communication skills.
• Ability to work independently and collaboratively in a mission-focused environment.
• S. citizenship and ability to obtain and maintain all required government security clearances, as applicable.
• One or more of the following certifications:
• CompTIA Security+ CE
• Certified in Governance, Risk and Compliance (CGRC)
• Certified Information Systems Security Professional (CISSP)
• Equivalent cybersecurity certification meeting DOW requirements

Education & Experience

Possess current Secret Clearance plus one of the following:

• Bachelor's degree in Cybersecurity, Information Assurance, Information Technology, Computer Science, or a related field and a minimum of five (5) years of experience supporting RMF, cybersecurity compliance, information assurance, or system security activities.
• Minimum of nine (9) years of directly relevant cybersecurity, RMF, information assurance, or system security experience in lieu of a degree.

Technical Skills & Knowledge

Risk Management & Compliance

• Risk Management Framework (RMF)
• Security Authorization and Accreditation
• Security Control Assessment and Validation
• Continuous Monitoring Programs
• Cybersecurity Risk Assessments
• Plan of Action & Milestones (POA&M) Management

DOW Cybersecurity Frameworks & Guidance

• Department of War (DOW) Cybersecurity Policies
• DOW Cloud Computing Security Requirements Guide (CCSRG)
• NIST Special Publication 800-37
• DOW Risk Management Framework Guidance
• Security Authorization Processes

Identity & Access Management

• User Provisioning and Deprovisioning
• Role-Based Access Control (RBAC)
• Privileged Access Management
• Periodic User Access Reviews
• Account Compliance Monitoring

Cybersecurity Operations

• Continuous Monitoring Dashboard Evaluation
• Vulnerability Identification and Remediation
• Security Compliance Reporting
• Security Control Validation
• Risk-Based Decision Support
• Security Documentation Management

Location: Mechanicsburg, PA or Arlington VA. Employees will report onsite for the first 90 days after which the role becomes hybrid.

Clearance: Active Secret

Travel: Some CONUS travel required

Equal Opportunity Statement:Seneca Holdings provides equal employment opportunities to all employees and applicants without regard to race, color, religion, sex/gender, sexual orientation, national origin, age, disability, marital status, genetic information and/or predisposing genetic characteristics, victim of domestic violence status, veteran status, or other protected class status. This policy applies to all terms and conditions of employment, including, but not limited to, hiring, placement, promotion, termination, layoff, recall, transfer, leave of absence, compensation and training. The Company also prohibits retaliation against any employee who exercises his or her rights under applicable anti-discrimination laws. Notwithstanding the foregoing, the Company does give hiring preference to Seneca or Native individuals. Veterans with expertise in these areas are highly encouraged to apply.